Purchase-order redaction is the removal of buyer and contact PII from a PO before it is reused. Art. 5(1)(b) says data gathered to run an order may not be reused for an incompatible purpose. Art. 6(4) sets the test for judging that. Truly anonymous figures fall outside it, since no personal data is left.
When this applies
A PO names the buyer, the requester, and a ship-to address. Feeding a year of orders into spend analytics is further processing, and Art. 6(4) weighs the link, the context, and the likely effect. Anonymising the set removes the question.
How anonym.plus handles it
- Load the order into anonym.plus on your device.
- The tool flags buyer, requester, and contact fields.
- It catches the ship-to address.
- Confirm the flags and keep the line items.
- Swap or black out the IDs.
- Save the clean order on your machine.
What you need to provide
- The PO (PDF, DOCX, CSV, or scan).
- A field map for known ID columns.
- An operator (Replace keeps line items readable).
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | requester → [BUYER] |
| Company | ORGANIZATION | supplier → [SUPPLIER] |
| Location | LOCATION | ship-to → [ADDRESS] |
| Contact | EMAIL_ADDRESS | buyer email → [EMAIL] |
| Contact | PHONE_NUMBER | buyer tel → [PHONE] |
| Dates | DATE_TIME | order date → [DATE] |
Compliance achieved
- Answers the purpose-limitation rule in GDPR Art. 5(1)(b) by removing the personal layer.
- Takes an analytics set outside the Art. 6(4) compatibility test.
- A field map catches known ID columns at once.
- Local-only work — nothing is uploaded.
Anonymize purchase orders offline — see plans & start free →
Limitations & cautions
A ship-to address can hint at the buyer even after names go. Broaden it where the analysis allows. Bulk CSV orders mix tidy columns with free-text notes, so review those notes too.
Frequently asked questions
Is spend analysis a new purpose?
Often yes. Art. 5(1)(b) allows reuse only for a compatible purpose, and Art. 6(4) lists the factors: the link to the first purpose, the context, and the likely effect.
Why does anonymising end the question?
Because the GDPR governs personal data only. Once no buyer can be singled out, the Art. 6(4) test has nothing left to bite on.
Does it handle a CSV export of many orders?
Yes. A field map flags ID columns across the file in one local pass.