Regulatory-filing redaction is the removal of personal data from licences, permits, and regulator submissions. Much of this content also sits on a public register. GDPR Recital 26 tells you to count data that others can reasonably obtain. A masked officer is therefore not anonymous when the regulator publishes the same name.
When this applies
A buyer checks each licence and the approved people behind it. The regulator's register already lists some of those names. Redact the copy, then judge what the public record still gives away.
How anonym.plus handles it
- Load the document into anonym.plus on your device.
- It flags officer names, contacts, and ID numbers.
- Licence numbers and approval text stay in place.
- Swap or black out the confirmed PII.
- Save the clean copy on your device.
What you need to provide
- The submission (PDF, DOCX, or scan).
- An operator; Replace keeps the content readable.
- Optional allow-list to keep licence references.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | named officer → [OFFICER] |
| Contact | EMAIL_ADDRESS | submission contact → [EMAIL] |
| Identifiers | NATIONAL_ID | officer id → [ID] |
| Org | ORGANIZATION | named entity → [ENTITY] |
| Location | LOCATION | registered seat → [ADDRESS] |
| Dates | DATE_TIME | granted 02/2025 → [DATE] |
Compliance achieved
- Applies the Recital 26 test, which counts data others can reasonably obtain.
- Cuts officer identifiers from approved-person and fit-and-proper sections.
- Keeps licence numbers and approval text whole for review.
- Fully offline — filings never reach the cloud.
Anonymize regulatory filings offline — see plans & start free →
Limitations & cautions
Officer names in a small regulated firm can be public elsewhere, so a swap may not be true anonymity on its own. Weigh outside sources, and broaden detail where a single role gives a person away.
Frequently asked questions
Is masking enough when the regulator publishes the name?
Often not. Recital 26 asks what a reader could reasonably find elsewhere. If the register names the same officer, treat the file as pseudonymous and control who receives it.
Which parts of a filing hold personal data?
Approved-person and fit-and-proper sections, signatures, and contact blocks. Licence numbers and approval wording are not personal data, so they stay.
Can I process a scanned page?
Yes. Local OCR reads scanned pages, so IDs in image files are caught.