Proposal redaction is the removal of personal data from a cover application. For a consumer, the Consumer Insurance (Disclosure and Representations) Act 2012 replaced the old duty of disclosure with a duty under s.2 to take reasonable care not to make a misrepresentation. The answers on the form are the record of that duty. UK GDPR Art. 5(1)(c) still limits what you keep and share, and DPA 2018 s.3(2) sets the test for what counts as personal data. anonym.plus marks each item on your own device, so the form stays usable while the protected fields go.
When this applies
A proposal captures the applicant's National Insurance number, salary, and bank details in full. It also captures the answers CIDRA 2012 measures for reasonable care. You clear the identifiers before the paperwork reaches a broker, a partner, or a training set. The signed original stays in your own file as the record of what was asked and answered.
How anonym.plus handles it
- Open the form in anonym.plus on your workstation.
- Local OCR reads any scanned page attached to it.
- The tool flags names, NI numbers, accounts, and contacts.
- Confirm each flag and clear any header term caught by mistake.
- Replace each identifier with a label, or black it out.
- Save the clean copy. The original never leaves your device.
What you need to provide
- The completed form (PDF, DOCX, or scan).
- An operator: Replace (swap), Redact (black out), or Mask (partial).
- Optional: an alias map if you must re-link the applicant later.
PII & financial identifiers detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | Eleanor Whitfield → [APPLICANT] |
| Identifiers | UK_NINO | QQ 12 34 56 C → [NINO] |
| Financial | UK_BANK_NUMBER | 20-44-12 acct 4412 9087 → [ACCOUNT] |
| Contact | EMAIL_ADDRESS | e.whitfield@example.co.uk → [EMAIL] |
| Dates | DATE_TIME | DOB 04/12/1979 → [DOB] |
| Location | LOCATION | 12 Pine Road, Leeds → [ADDRESS] |
Compliance achieved
- Supports data minimisation under UK GDPR Art. 5(1)(c) and the identifiability test in DPA 2018 s.3(2).
- CIDRA 2012 s.2 puts a consumer under a duty to take reasonable care not to make a misrepresentation; a redacted working copy leaves the signed original, which is the evidence of that duty, untouched.
- Where a careless answer becomes a qualifying misrepresentation, the proportionate remedies sit in CIDRA 2012 s.4 and Schedule 1 — not automatic avoidance.
- Runs offline, so applicant data never reaches a third party by accident. 340+ PII types are covered, with AES-256-GCM at rest.
Anonymise insurance applications offline — see plans & start free →
Limitations & cautions
The tool flags named items. It cannot judge when a free-text answer re-identifies an applicant, and it cannot tell you whether an answer met the standard of care in CIDRA 2012 s.2. Read the narrative responses yourself before you share the file.
Frequently asked questions
What personal data sits on a typical proposal form?
Usually a name, a National Insurance number, an income figure, an address, and bank details. UK GDPR treats each as personal data, and DPA 2018 s.3(2) is the test for whether a field still identifies someone. anonym.plus flags them so you can apply the minimisation rule in Art. 5(1)(c).
Does redacting a copy affect the duty under CIDRA 2012?
No. CIDRA 2012 s.2 puts the consumer under a duty to take reasonable care not to make a misrepresentation, and the signed original is the evidence of what was asked and answered. A redacted working copy sits alongside it and does not replace it.
Will the form still read correctly after the swap?
Yes. The Replace operator drops a steady label in place of each item, so the text still flows and no longer names a real person.