Benefits broker export redaction is the removal of personal data from a file headed to a broker who acts as a processor under UK GDPR Art. 28. That article binds the recipient to act only on the controller's documented instructions. anonym.plus marks each identifier on your device, so the file stays usable while shared data is minimised.
When this applies
A census lists each worker, an NI number, a salary, and cover tiers. You trim those identifiers under Art. 28 before the file goes to the recipient.
How anonym.plus handles it
- Open the file in anonym.plus on your device.
- Local OCR reads any scanned page in the set.
- The tool flags names, NI numbers, salaries, and contacts.
- Keep the cover tiers the recipient actually needs.
- Swap or black out the confirmed items.
- Save the minimised copy locally, then hand it off.
What you need to provide
- The census file (CSV, XLSX, PDF).
- An operator (Mask suits NI number and salary fields).
- Optional batch for multiple census files.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | employee R. Costa → [EMPLOYEE] |
| NI number | UK_NINO | QQ 50 44 11 B → [NINO] |
| Financial | MONEY | salary £72,000 → [SALARY] |
| Dates | DATE_TIME | DOB 1988 → [DOB] |
| Contact | EMAIL_ADDRESS | r.costa@example.co.uk → [EMAIL] |
| Organization | ORGANIZATION | Marlow Brokers → [BROKER] |
Compliance achieved
- Supports data minimisation before a UK GDPR Art. 28 handoff.
- Shares only the cover tiers a processor needs to quote.
- Offline work keeps the data on your device until you send it.
Anonymise benefits broker exports offline — see plans & start free →
Limitations & cautions
Art. 28 still requires a written processor contract; redaction does not replace it. The tool flags named items, yet a salary plus a tier can hint at one worker. Review small-group rows before the handoff.
Frequently asked questions
What does UK GDPR Art. 28 require of a broker?
A broker acting as a processor must follow a written contract and act on your documented instructions. Minimising the data before sending reduces what they hold.
Can I keep cover tiers?
Yes. Tiers are not direct identifiers, so allow-list them while names, NI numbers, and salaries are masked.
Is the census uploaded?
No. The app is fully offline. You control when the minimised file goes out.