Expense report redaction is the removal of staff personal data from a reimbursement record. The claim exists because ITEPA 2003 s.336 sets the general rule for deducting an employee's expenses, and s.338 covers travel for necessary attendance. Both tests turn on the business reason, not the traveller's name. anonym.plus marks each identifier on your device, so the spend categories stay while the named employee goes.
When this applies
The claim names the traveller, their card, and attached receipts carrying addresses. Once the business purpose is recorded, an analytics set does not need the person. You strip the identifiers so the file meets the anonymity test in UK GDPR Recital 26 before it feeds a spend dashboard.
How anonym.plus handles it
- Open the claim in anonym.plus on your device.
- Built-in OCR reads scanned receipts and stubs.
- The app marks the traveller name and card line.
- Keep the category, date, and amount columns.
- Replace or black out the confirmed identifiers.
- Save the clean file locally.
What you need to provide
- The claim plus receipts (PDF, XLSX, scan).
- An operator (Replace keeps the categories readable).
- Optional batch for a folder of monthly files.
PII & financial identifiers detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | traveller Samuel Poole → [EMPLOYEE] |
| Financial | CREDIT_CARD | card 4111 .. → ****1111 |
| Contact | EMAIL_ADDRESS | s.poole@example.co.uk → [EMAIL] |
| Location | LOCATION | hotel address → [ADDRESS] |
| Money | MONEY | claim £312 → [AMOUNT] |
| Dates | DATE_TIME | trip 02/2026 → [DATE] |
Compliance achieved
- Meets the anonymity test in UK GDPR Recital 26 and the minimisation principle in UK GDPR Art. 5(1)(c).
- Keeps the business purpose that the deduction rule in ITEPA 2003 s.336 and the travel rule in ITEPA 2003 s.338 turn on.
- Leaves employer records intact: PAYE Regulations 2003 reg. 97 requires them to be kept for at least three years after the tax year.
- Built-in OCR reads receipt images, so printed names are caught. Offline work keeps staff data off the cloud.
Anonymise expense reports offline — see plans & start free →
Limitations & cautions
A rare route or a single large claim can still single out one traveller. The app marks named items, not every indirect clue. Redaction does not touch the PAYE records reg. 97 requires you to keep, nor the evidence a deduction under ITEPA 2003 s.336 rests on. Review outliers before you share the set.
Frequently asked questions
Does it read scanned receipts?
Yes. On-device OCR reads the image, then marks the name, card, or address on the stub so you can clear it.
Can I keep the spend categories?
Yes. Allow-list the category, date, and amount columns. The business purpose that ITEPA 2003 s.336 and s.338 turn on stays readable, while the traveller's data is marked.
Is the claim uploaded?
No. The desktop app runs locally, so the file and its receipts stay on your machine.