Personnel File Disclosure Redaction with anonym.plus

Clear sensitive staff data from an HR dossier before you disclose it.

A personnel-file disclosure is the copy of an HR dossier you release on request. GDPR Art. 9 gives extra protection to special-category data, like health or union membership. anonym.plus marks that data on your own device before you share it.

When this applies

An employee or a body asks for an HR record. It holds sick notes, union details, and the names of co-workers and referees.

How anonym.plus handles it

  1. Open the dossier in anonym.plus on your device.
  2. The tool flags health, union, and other sensitive PII.
  3. Keep the subject's own data where the request allows.
  4. Mark co-workers' and referees' PII for removal.
  5. Black out or swap each one, then review the result.
  6. Save the cleared copy on your machine.

What you need to provide

PII entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONco-worker name → [PERSON]
HealthMEDICAL_LICENSEsick-note detail → [HEALTH]
IdentifiersNATIONAL_IDstaff no. → [ID]
ContactEMAIL_ADDRESSreferee email → [EMAIL]
LocationLOCATIONhome address → [ADDRESS]
DatesDATE_TIMEDOB → [DOB]

Compliance achieved

Anonymize personnel files offline — see plans & start free →

Limitations & cautions

Art. 9 needs a strong legal basis to handle sensitive data. What you may disclose is a legal judgment. The tool flags health and union clues, but cannot decide whether the request entitles the person to see them. Confirm with HR and legal.

Frequently asked questions

What counts as special-category data?

Data on health, race, politics, religion, union membership, sex life, biometrics, and genetics. Art. 9 gives it extra protection. anonym.plus flags these clues for review.

Can the employee see their own sick notes?

Sometimes, depending on the request and basis. The balance is a legal call. The tool flags the data so you can keep or remove it.

Does it handle a German HR file?

Yes. With 48 languages it reads German and other tongues, and matches local ID and date formats.