Evidence log redaction is the removal of personal and special-category data from a case index. UK GDPR Article 9(1) gives extra protection to health, race, belief and similar data; Article 9(2)(f) is the condition an employer usually relies on to hold it for the defence of claims, and Article 10 governs any allegation of an offence. anonym.plus marks names and sensitive terms on your device.
When this applies
A case index links items to people, with notes on health or background. You strip those special-category details before sharing the log.
How anonym.plus handles it
- Open the index in anonym.plus on your device.
- The app marks names and special-category terms.
- Built-in OCR reads scanned exhibit cover sheets.
- Keep the item numbers and chain-of-custody dates.
- Swap or black out the confirmed items.
- Save the clean copy locally.
What you need to provide
- The case index (PDF, DOCX, or scan).
- An operator (Redact suits sensitive entries).
- Optional allow-list for item and exhibit numbers.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | linked person → [SUBJECT] |
| Origin | NRP | ethnicity noted → [SPECIAL_CATEGORY] |
| Dates | DATE_TIME | logged 4 June → [DATE] |
| Contact | EMAIL_ADDRESS | custody@example.co.uk → [EMAIL] |
| Location | LOCATION | the evidence room → [LOCATION] |
| Identifiers | UK_NINO | QQ 12 34 56 C → [NINO] |
Compliance achieved
- Shields the special-category data named in UK GDPR Article 9(1), held for the defence of claims under Article 9(2)(f).
- Treats an alleged offence as UK GDPR Article 10 data, needing a condition in DPA 2018 Sch. 1 and the policy document Sch. 1 Part 4 expects.
- Serves integrity and confidentiality under UK GDPR Art. 5(1)(f) with the pseudonymisation measure Art. 32(1)(a) names.
- Keeps item numbers and chain-of-custody dates intact, so the log still evidences the fair process the ACAS Code expects.
- Deliberate re-identification of a de-identified exhibit index is an offence under DPA 2018 s.171.
Anonymise investigation evidence logs offline — see plans & start free →
Limitations & cautions
Article 9 data, such as health or background, can re-identify a person even with the name removed. The app marks named items and obvious sensitive terms, not every clue, and it cannot choose your lawful condition for you. Redacting the index does not redact the exhibits it points to — review each entry before you share the log.
Frequently asked questions
What does UK GDPR Article 9 protect?
Article 9(1) gives extra protection to special category data such as health, race, belief and trade union membership. anonym.plus marks those terms so you can black them out of the log.
Which condition covers holding it for a case?
Article 9(2)(f) covers processing necessary for the establishment, exercise or defence of legal claims. De-identifying the circulated copy keeps that processing proportionate.
Is the index uploaded?
No. The app is offline, so the log and its entries stay on your machine.