Onboarding Record De-Identification with anonym.plus

Clear new-starter personal data before you study onboarding flow.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

Onboarding de-identification is the removal of personal data from a new worker’s intake pack. Equality Act 2010 s.60 restricts what health questions an employer can ask before a job offer, and the pack’s DBS certificate, obtained under Part V of the Police Act 1997, carries criminal-record data governed by UK GDPR Art. 10 rather than the special-category regime in Art. 9 that covers the rest of the pack. anonym.plus does this on a local device, so the record no longer names the new starter.

When this applies

An intake pack holds the new starter’s name, ID, bank detail, an occupational assessment, and a DBS certificate. To study onboarding times or training gaps across many starters, you can anonymise it and drop the burden of both regimes at once.

How anonym.plus handles it

  1. Open the pack in anonym.plus on a local device.
  2. Local OCR reads scanned forms and certificates.
  3. It flags the starter’s name, ID, contacts, and health checks.
  4. Turn the reversible map off so no key is kept.
  5. Swap each detail for a non-reversible label.
  6. Save the result. The source never leaves your machine.

What you need to provide

Patient data entity types detected

Categoryanonym.plus entity typeExample
StarterPERSONnew starter: T. Williams → [HIRE]
Staff IDIDemployee no. 30912 → [EMP_ID]
IdentifiersNATIONAL_IDNI No. QQ 11 08 20 C → [ID]
ContactEMAIL_ADDRESSt.williams@example.nhs.uk → [EMAIL]
DatesDATE_TIMEstart 01/06/2026 → [DATE]
HealthPERSONocc-health note → [HEALTH]

Compliance achieved

Anonymise onboarding records offline — see plans & start free →

Limitations & cautions

An intake document holds rich detail, from bank records to occupational checks. Even with the name gone, a rare role on one start date can re-identify a starter. Apply the motivated-intruder test and keep no key before you call it anonymous.

Frequently asked questions

Are occupational checks and DBS certificates governed by the same rule?

No. An occupational assessment is special-category data under UK GDPR Art. 9, while a DBS certificate issued under Part V of the Police Act 1997 is criminal-offence data, governed separately by Art. 10. Both need clearing before an intake pack is reused for study, but for two different legal reasons.

Why does Equality Act 2010 s.60 matter to an intake pack?

Section 60 restricts an employer from asking about a candidate's condition or wellbeing before making a job offer, with limited exceptions such as checking someone can carry out a function intrinsic to the role. What lawfully does end up in the pack is still special-category data, so it's cleared the same way as any other Art. 9 field.

Does it read Welsh-language forms?

Yes. Multiple languages are supported, which matters for correct name and date detection on intake packs from any part of the UK.