Pension scheme statement redaction is the removal of personal data from the annual benefit statement a workplace scheme sends its members. That disclosure is required by the Occupational and Personal Pension Schemes (Disclosure of Information) Regs 2013, made under Pension Schemes Act 1993 s.113, within the governance regime of the Pensions Act 2004. anonym.plus marks each identifier on your device, so the document stays auditable while private detail drops out.
When this applies
A benefit statement names the member, an NI number, an account number, and a pot value. You trim those identifiers before the file goes to an auditor reconciling the scheme.
How anonym.plus handles it
- Open the document in anonym.plus on your device.
- Local OCR reads a scanned or printed copy.
- The tool flags names, account numbers, and NI numbers.
- Keep the value columns an auditor needs.
- Swap or black out the confirmed items.
- Save the clean copy locally.
What you need to provide
- The benefit statement (PDF, scan, or CSV).
- An operator (Mask suits account numbers).
- Optional batch for a plan-wide set of files.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | member F. Ito → [MEMBER] |
| NI number | UK_NINO | QQ 61 90 33 A → [NINO] |
| Financial | MONEY | pot £84,200 → [BALANCE] |
| Account | UK_BANK_NUMBER | acct no. → [ACCOUNT] |
| Dates | DATE_TIME | period 2025/26 → [DATE] |
| Contact | EMAIL_ADDRESS | f.ito@example.co.uk → [EMAIL] |
Compliance achieved
- Supports the member disclosure duties in the Occupational and Personal Pension Schemes (Disclosure of Information) Regs 2013, made under Pension Schemes Act 1993 s.113.
- Keeps pot values and periods so an auditor can reconcile the scheme under the governance regime of the Pensions Act 2004.
- Masks the NI number and account line in line with the security duty in UK GDPR Art. 32.
- Offline work keeps member data off any server — useful because scheme trustees are controllers in their own right, separate from the employer.
Anonymise pension scheme statements offline — see plans & start free →
Limitations & cautions
A pot value plus a tenure can still point to one member on a small scheme. The tool flags named items; it cannot judge every unique pattern, and a redacted copy never replaces the statement the scheme must actually issue to the member. Review small-group rows before sharing.
Frequently asked questions
What does the annual benefit statement disclose?
A member's accrued pension or pot value and the projections the Disclosure of Information Regs 2013 require. Copies shared for audit or analysis can be redacted without touching the statement issued to the member.
Who is the controller for scheme data?
Trustees are controllers in their own right, alongside the employer for its own HR purposes. That split is a reason to share the minimum between them, which is what this pass supports.
Can I clean a plan-wide set at once?
Yes. Batch mode handles up to 20 files per run, all processed locally with OCR for scans.