Market Abuse Report Redaction with anonym.plus

Clear personal data from a suspicious-activity filing before any onward share.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

Market-abuse report redaction is the removal of personal data from a suspicious transaction and order report. UK MAR Art. 16(2) obliges firms professionally arranging or executing transactions to notify the FCA without delay when they suspect abuse, and the conduct is judged against the prohibitions in Arts. 14 and 15. The filing itself goes to the regulator in full; every internal copy is where the personal data risk sits. anonym.plus marks each subject and source field on your machine.

When this applies

The filing names a suspected person, the employee who raised it and the trading account involved. You strip those before any internal or onward extract circulates beyond the surveillance team.

How anonym.plus handles it

  1. Open the file in anonym.plus on your device.
  2. Local OCR reads a scanned or printed copy.
  3. The tool flags subject, source, and account data.
  4. Keep the event timeline and order details.
  5. Swap or black out the confirmed identifiers.
  6. Save the clean copy locally.

What you need to provide

PII & financial identifiers detected

Categoryanonym.plus entity typeExample
NamesPERSONsuspected K. Halloran → [SUBJECT]
NamesPERSONfiler/source → [SOURCE]
IdentifiersNATIONAL_IDsubject ref → [ID]
FinancialUK_BANK_NUMBERtrading acct → [ACCOUNT]
ContactEMAIL_ADDRESSfiler@example.co.uk → [EMAIL]
DatesDATE_TIMEevents 03/2025 → [DATE]

Compliance achieved

Anonymise market-abuse reports offline — see plans & start free →

Limitations & cautions

The report reaches the FCA in full — redact only an internal or onward extract, never the submitted version. The source's identity is the most sensitive field in the file, and a narrative can point to them by role alone. Read the free text before any internal circulation.

Frequently asked questions

Should I redact the version sent to the regulator?

No. UK MAR Art. 16(2) requires a complete notification, and FSMA 2000 s.348 makes what the FCA receives confidential. Redact only an internal or onward extract.

Can the subject demand a copy under a subject access request?

Not automatically. DPA 2018 Sch. 2 Part 1 para. 2 lets a controller restrict access where disclosure would be likely to prejudice the prevention or detection of crime. Take that decision case by case.

How is the internal reporter protected?

The tool flags the source field so you can shield it in every shared copy. Their legal protection comes from Part IVA of the Employment Rights Act 1996 and FCA SYSC 18.