Cross-border production redaction is the removal of EU personal data before a transfer for foreign discovery. GDPR Art. 48 makes a third-country court order enforceable only through an international agreement. anonym.plus clears each record on an EU device first.
When this applies
A US court orders records held in the EU. Art. 48 says the order alone is not a route out; a Chapter V transfer ground is still needed. Art. 49(1)(e) covers legal claims, but the EDPB reads that derogation as occasional, not bulk.
How anonym.plus handles it
- Open the records in anonym.plus on a local EU device.
- It flags EU names, IDs, and contacts in each file.
- Set the language so EU date and ID formats parse.
- Confirm the flags before any transfer.
- Replace or mask each confirmed value.
- Save the cleared records on your EU device.
What you need to provide
- The records (PDF, DOCX, XLSX, or scan).
- An EU-language setting for correct ID parsing.
- Replace with the map off for true anonymity.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | Herr Bauer → [NAME] |
| Identifiers | IBAN_CODE | DE89 3704... → [IBAN] |
| Dates | DATE_TIME | 12.03.2026 → [DATE] |
| Contact | EMAIL_ADDRESS | name@firma.de → [EMAIL] |
| Location | LOCATION | Hauptstrasse 5 → [ADDRESS] |
| Identifiers | PHONE_NUMBER | +49 170... → [PHONE] |
Compliance achieved
- GDPR Art. 48 means a foreign discovery order is not, alone, a transfer ground.
- Art. 49(1)(e) covers legal claims, but only for occasional, limited sets.
- Data cleared to the Recital 26 standard is no longer personal data at all.
- The pass runs in-region, and EU IDs are detected across 48 languages.
Anonymize cross-border productions offline — see plans & start free →
Limitations & cautions
Art. 48 is a real tension between US discovery and EU law. Clearing records in-region lowers the conflict, but it does not resolve every transfer question. Take local counsel on whether a transfer is lawful, even after redaction.
Frequently asked questions
Does a US discovery order satisfy GDPR?
No. Art. 48 recognizes a third-country judgment only where an international agreement, such as a mutual legal assistance treaty, is in force. You still need a lawful basis under Art. 6 and a Chapter V route for the transfer itself.
Which derogation usually applies?
Art. 49(1)(e): transfers necessary for the establishment, exercise, or defence of legal claims. EDPB guidance treats the derogations narrowly, so it does not license a bulk export. Clearing the set in-region shrinks what has to rely on it.
Does it parse EU ID and date formats?
Yes. With the right language set, IBANs, EU phone formats, and DD.MM.YYYY dates are caught.