Payroll journal redaction is the removal of staff personal data from a wage run, some of which is special-category data under UK GDPR Art. 9. That article restricts data such as trade-union dues or health deductions. anonym.plus marks each identifier on your device, so the totals stay while sensitive entries go.
When this applies
A wage run lists each worker's NI number, bank line, and deduction codes that can reveal union or health status. You strip those before any analysis.
How anonym.plus handles it
- Open the wage run in anonym.plus on your device.
- The app marks names, NI numbers, and bank lines.
- It also marks deduction codes that reveal sensitive status.
- Keep gross, net, and PAYE subtotals intact.
- Replace or black out the confirmed identifiers.
- Save the clean run locally.
What you need to provide
- The wage run (CSV, XLSX, or PDF).
- An operator (Redact suits sensitive deduction codes).
- Optional allow-list for pay-period dates.
PII & financial identifiers detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | worker Joy Akhtar → [EMPLOYEE] |
| Identifiers | UK_NINO | QQ 33 77 12 D → [NINO] |
| Financial | UK_BANK_NUMBER | deposit acct 5521 → [ACCOUNT] |
| Sort code | UK_SORT_CODE | 30-00-00 → [SORT] |
| Money | MONEY | net £3,140 → [AMOUNT] |
| Contact | EMAIL_ADDRESS | j.akhtar@example.co.uk → [EMAIL] |
Compliance achieved
- Removes special-category entries restricted by UK GDPR Art. 9.
- Strips union and health deduction codes that reveal status.
- Offline work keeps wage data off any server.
Anonymise payroll journals offline — see plans & start free →
Limitations & cautions
Article 9 covers data revealing health, beliefs, or union membership. A deduction code can imply such status indirectly. The app marks coded fields; confirm the meaning of each before you share.
Frequently asked questions
What makes payroll data special-category?
Codes that reveal union dues, health plans, or religious observance fall under Article 9. anonym.plus marks those entries alongside names and bank lines.
Will the pay subtotals survive?
Yes. Allow-list the gross, net, and PAYE columns. Only personal and sensitive entries are marked.
Is the wage run uploaded?
No. Work runs on your device with no cloud step, so the run stays private.