Benefits statement redaction is the removal of personal and special category data from a total reward summary. Where the page names private medical cover, that line is health data under UK GDPR Art. 9; where it restates a pension figure, it sits alongside the member disclosures required by the Occupational and Personal Pension Schemes (Disclosure of Information) Regs 2013. anonym.plus marks each identifier on your device, so the document stays readable while the person drops out.
When this applies
The summary shows the worker, a pension figure, an NI number, and a private medical cover line. You strip those identifiers before it goes to an external reward consultant modelling the package.
How anonym.plus handles it
- Open the document in anonym.plus on your device.
- Local OCR reads a scanned or printed copy.
- The tool flags names, IDs, and any health cover line.
- Keep the value columns a consultant needs.
- Swap or black out the confirmed items.
- Save the de-identified copy locally.
What you need to provide
- The summary (PDF, scan, or CSV export).
- An operator (Mask suits the ID numbers).
- Optional batch for many files at once.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | Olivia Grant → [EMPLOYEE] |
| Health | MEDICAL_CONDITION | PMI cover note → [CONDITION] |
| NI number | UK_NINO | QQ 41 90 88 A → [NINO] |
| Dates | DATE_TIME | period 2025/26 → [DATE] |
| Financial | MONEY | pension £1,420 → [AMOUNT] |
| Employer | ORGANIZATION | Riverside Ltd → [EMPLOYER] |
Compliance achieved
- Treats any medical cover line as special category under UK GDPR Art. 9 while keeping the reward values a consultant models, per Art. 5(1)(c).
- Sits alongside the member disclosure duties in the Occupational and Personal Pension Schemes (Disclosure of Information) Regs 2013, made under Pension Schemes Act 1993 s.113.
- Leaves the cash equivalents that reach HMRC through the benefits code in ITEPA 2003 Part 3, with Class 1A National Insurance charged by SSCBA 1992 s.10.
- Offline work keeps the document off any server; working copies use AES-256-GCM.
Anonymise benefits statements offline — see plans & start free →
Limitations & cautions
A reward value plus a tenure can still point to one person on a small team. The tool flags named items; it cannot judge every unique pattern, and it does not replace the statutory statement the scheme itself must issue. Review small-group rows before sharing.
Frequently asked questions
What is a benefits statement and why redact it?
It sets out an employee's reward and perks in one page. Stripping the Art. 9 identifiers lets you share it for benchmarking or modelling without exposing the worker or their cover.
Can I keep the values?
Yes. Reward figures are not direct identifiers, so allow-list them while names, NI numbers, and health lines are removed — that is the minimisation Art. 5(1)(c) asks for.
Does this replace the pension scheme's own statement?
No. A scheme must still issue the statutory annual benefit statement under the Disclosure of Information Regs 2013. This pass only cleans the employer's copy before it is shared.