A specimen signature card exists because of s.24 of the Bills of Exchange Act 1882: a forged or unauthorised signature is wholly inoperative, so a bank keeps a genuine mark to compare against. The card is a mandate record, not a contact sheet. UK GDPR Art. 4(14) defines biometric data as data from specific technical processing that allows unique identification. A stored signature image usually falls short of that, so the Art. 9(1) special-category rules do not normally bite — though a verification engine that measures the mark can change the answer. Art. 32 requires appropriate security either way. anonym.plus marks the printed fields on your machine and lets you black out the mark itself.
When this applies
A vendor digitising an old card tray needs the file format, not the customers. Every card ties a name, an account and a handwritten mark together. You clear the printed identifiers and cover the mark before the tray leaves the building.
How anonym.plus handles it
- Open the scanned image in anonym.plus on your device.
- Local OCR reads the printed name and number line.
- It flags the holder, NINO, and account.
- Confirm the flags and keep the bank's internal codes.
- Black out the specimen mark and personal fields.
- Save the clean image locally.
What you need to provide
- The record (image scan or PDF).
- An operator (Redact suits an image mark).
- Optional batch for a tray of files.
PII & financial identifiers detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | Quinn Ortiz → [HOLDER] |
| Financial | UK_SORT_CODE | 23-45-67 → [SORT_CODE] |
| Financial | UK_BANK_NUMBER | 88301220 → [ACCOUNT] |
| Identifiers | UK_NINO | QQ 45 21 77 C → [NINO] |
| Contact | PHONE_NUMBER | +44 29 2018 2210 → [PHONE] |
| Dates | DATE_TIME | opened 1998 → [DATE] |
Compliance achieved
- Protects a mandate record kept because Bills of Exchange Act 1882 s.24 makes an unauthorised signature wholly inoperative.
- Applies the biometric-data test in UK GDPR Art. 4(14) before treating a mark as Art. 9(1) special-category data.
- Meets the security-of-processing duty in UK GDPR Art. 32 by keeping the image on your own device.
- Supports the orderly-records rule in FCA SYSC 9.1.1R — the original card stays where it belongs.
- Local OCR reads the printed lines, so nothing has to be retyped or uploaded.
Anonymise signature cards offline — see plans & start free →
Limitations & cautions
A handwritten mark survives text redaction because it is a picture, not a string. Draw a Redact box over it when you need true anonymity. Whether the mark counts as biometric data under Art. 4(14) turns on how it is later processed, not on the image alone.
Frequently asked questions
Does the tool remove the handwritten mark?
Not automatically. It flags the text fields. To hide the specimen mark, draw a Redact box over the image so those pixels are removed — a mark kept because of Bills of Exchange Act 1882 s.24 is exactly the field an outsider should not receive.
Is a specimen signature special-category data?
Usually not. UK GDPR Art. 4(14) requires specific technical processing that allows unique identification, and a stored image on its own rarely meets that, so Art. 9(1) does not apply by default. Feed the same image into a signature-verification engine and the analysis changes, so record which use applies.
Can I keep the account reference?
Yes. Allow-list the internal code, or mask the number to its last four digits instead of removing it fully, so the card can still be matched to a file.