Benefits broker export redaction is the removal of personal data from a census file headed to a broker. Where the broker acts only on your documented instructions it is a processor: UK GDPR Article 28(1) requires sufficient guarantees and Article 28(3) a written contract with defined subject matter, duration, and security terms. anonym.plus marks each identifier on your device, so the file stays usable while shared data is minimised.
When this applies
A census lists each worker, an NI number, a date of birth, a salary, and cover tiers. You trim those identifiers before the file goes out for a quotation that only needs the tiers and the age band.
How anonym.plus handles it
- Open the file in anonym.plus on your device.
- Local OCR reads any scanned page in the set.
- The tool flags names, NI numbers, salaries, and contacts.
- Keep the cover tiers the recipient actually needs.
- Swap or black out the confirmed items.
- Save the minimised copy locally, then hand it off.
What you need to provide
- The census file (CSV, XLSX, PDF).
- An operator (Mask suits NI number and salary fields).
- Optional batch for multiple census files.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | employee R. Costa → [EMPLOYEE] |
| NI number | UK_NINO | QQ 50 44 11 B → [NINO] |
| Financial | MONEY | salary £72,000 → [SALARY] |
| Dates | DATE_TIME | DOB 1988 → [DOB] |
| Contact | EMAIL_ADDRESS | r.costa@example.co.uk → [EMAIL] |
| Organization | ORGANIZATION | Marlow Brokers → [BROKER] |
Compliance achieved
- Supports a handoff to a processor that must offer sufficient guarantees under UK GDPR Art. 28(1) and be bound by the written terms in Art. 28(3).
- Minimises before you send, per Art. 5(1)(c), and keeps the file secure in transit and at rest under Art. 32.
- Flags the transfer question: if the recipient or its sub-processor sits outside the UK, a mechanism under Art. 46 — the IDTA or the ICO addendum to the EU SCCs — is needed as well.
- Keeps health-related cover tiers on the right side of Art. 9: share the tier, never the condition behind it.
Anonymise benefits broker exports offline — see plans & start free →
Limitations & cautions
Article 28 still requires a written processor contract; redaction does not replace it, and a broker that decides its own purposes is a controller, not a processor. The tool flags named items, yet a salary plus a tier can hint at one worker. Review small-group rows before the handoff.
Frequently asked questions
What does UK GDPR Article 28 require of a broker?
If it processes on your instructions, Article 28(1) requires sufficient guarantees and Article 28(3) a written contract covering subject matter, duration, nature and purpose, data types, security, sub-processors, and deletion. Minimising the file first reduces what those terms have to protect.
What if the broker is overseas?
A restricted transfer needs a mechanism under Article 46, in practice the IDTA or the ICO addendum to the EU standard contractual clauses, plus a transfer risk assessment. Sending less data narrows that assessment.
Is the census uploaded?
No. The app is fully offline. You control when the minimised file goes out.