Annual leave request redaction is the removal of personal data from a holiday request so it meets the anonymisation bar in UK GDPR Recital 26. The leave itself sits under the Working Time Regulations 1998, while truly anonymous data falls outside UK GDPR. anonym.plus marks each identifier on your device, so the form stays usable while the person drops out.
When this applies
Such a request names the worker, the holiday dates, and an optional note. You trim those identifiers toward the Recital 26 bar before any pattern analysis runs.
How anonym.plus handles it
- Open the request in anonym.plus on your device.
- Local OCR reads a scanned, signed form if needed.
- The tool flags names, dates, and the note.
- Disable the reversible alias map for true anonymity.
- Swap or black out the confirmed items.
- Save the anonymised copy locally.
What you need to provide
- The request (PDF, DOCX, or scan).
- An operator (Replace keeps the dates readable).
- The alias map disabled when anonymity must be final.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | employee S. Berger → [EMPLOYEE] |
| Dates | DATE_TIME | 14/07/2026 → [DATE] |
| Reason | MEDICAL_CONDITION | reason note → [NOTE] |
| Staff ID | ID | staff no. → [STAFF_ID] |
| Contact | EMAIL_ADDRESS | s.berger@example.co.uk → [EMAIL] |
| Location | LOCATION | office site → [SITE] |
Compliance achieved
- Targets the anonymisation bar in UK GDPR Recital 26.
- Disabling the alias map removes the re-link path for true anonymity.
- Offline work keeps the request away from any server.
Anonymise annual leave requests offline — see plans & start free →
Limitations & cautions
Recital 26 sets a high bar: data is anonymous only if no motivated intruder could re-identify it by reasonable means. Keep the alias map disabled, and check that a small team plus dates does not still single out a worker.
Frequently asked questions
When is holiday data truly anonymous under Recital 26?
Only when no party could re-identify it by reasonable means. Disable the reversible alias map so no re-link path remains.
Does the reversible map block anonymity?
Yes, if kept. A stored map can re-link a person, so disable it when anonymity must be final.
Is the request uploaded?
No. The app is fully offline, so the form stays on your device.