Whistleblowing Report Redaction with anonym.plus

Shield a discloser's identity in a safety report before it is shared.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

Whistleblowing report redaction is the removal of personal data from a disclosure. A qualifying disclosure is defined by ERA 1996 s.43B, inside the Part IVA regime the Public Interest Disclosure Act 1998 inserted; s.44 adds a separate right not to suffer detriment for raising a health-and-safety concern. anonym.plus marks names and contacts on your device, so the concern stays clear while the discloser is shielded.

When this applies

A safety disclosure names the discloser, the site, and managers. You strip those identifiers before the report leaves the safety team.

How anonym.plus handles it

  1. Open the report in anonym.plus on your device.
  2. The app marks the discloser and named managers.
  3. Built-in OCR reads a scanned hotline intake.
  4. Keep the hazard facts and dates on record.
  5. Swap or black out the confirmed identifiers.
  6. Save the clean copy locally.

What you need to provide

PII entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONthe discloser → [WHISTLEBLOWER]
NamesPERSONsite manager → [MANAGER]
ContactEMAIL_ADDRESStip@example.co.uk → [EMAIL]
ContactPHONE_NUMBER+44 161 496 0190 → [PHONE]
DatesDATE_TIMEfiled 3 April → [DATE]
LocationLOCATIONthe loading dock → [LOCATION]

Compliance achieved

Anonymise whistleblowing reports offline — see plans & start free →

Limitations & cautions

Keeping a discloser anonymous is hard. One vivid hazard detail can point to the person who saw it, even after names go. Redaction reduces exposure; it does not decide whether the disclosure qualifies under s.43B, and it cannot undo a detriment that has already happened. Where the concern must also be reported to a regulator, that duty stands whatever you redact internally.

Frequently asked questions

Can the tool fully hide who disclosed?

It removes names and contacts. A unique hazard detail can still identify the discloser, so check the narrative. Anonymity here reduces the s.47B detriment risk; it does not eliminate it.

Should I keep the alias map on?

No. Turn it off for a whistleblower so no key can re-link the report. Use a non-keyed Replace or Redact instead.

Can a confidentiality clause stop the disclosure?

No. ERA 1996 s.43J makes void any contractual term that would preclude a worker from making a protected disclosure, however the wider agreement is drafted.