RIDDOR record redaction is the removal of worker identifiers from the logs an employer keeps under the Health and Safety at Work etc. Act 1974, reported through the 2013 Regulations. The duty holder must record certain events, yet the clinical detail is special category data under UK GDPR Art. 9. anonym.plus marks each item on your own device, so the entry stays usable while the person is shielded.
When this applies
Such an entry pairs a worker's name and role with what befell them. When a copy passes to a safety rep or contractor, you trim the data the 1974 Act lets you protect, keeping only the dates and the event class.
How anonym.plus handles it
- Open the record in anonym.plus on your workstation.
- Local OCR reads a scanned or printed page.
- The tool flags names, roles, and the harm described.
- Confirm each flag and keep the reportable reference number.
- Swap each item for a steady label, or black it out.
- Save the clean copy. It never leaves your machine.
What you need to provide
- The filled record (PDF, XLSX, or scan).
- An operator: Replace (swap), Redact (black out), or Mask (partial).
- Optional allow-list to keep reference and line numbers.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | Charlotte Whitfield → [WORKER] |
| Health | MEDICAL_CONDITION | wrist fracture → [CONDITION] |
| NI number | UK_NINO | QQ 12 34 56 C → [NINO] |
| Dates | DATE_TIME | occurred 14/03/2026 → [DATE] |
| Location | LOCATION | Bay 4, Leeds depot → [AREA] |
| Org | ORGANIZATION | Pennine Works Ltd → [SITE] |
Compliance achieved
- Supports the recordkeeping duty under the Health and Safety at Work etc. Act 1974.
- Treats clinical detail as special category data under UK GDPR Art. 9.
- Runs fully offline, so worker data never reaches a server.
- Working copies are guarded by AES-256-GCM; 340+ PII types across 48 languages.
Anonymise RIDDOR records offline — see plans & start free →
Limitations & cautions
A small crew can be singled out by role plus date, even with no name. The tool flags listed items, but cannot judge when a rare task gives someone away. Review small-site rows yourself, and store such records apart as the ICO expects.
Frequently asked questions
What must such a record retain?
Enough to evidence the reportable event under RIDDOR 2013, such as the date, the event class, and the reference. Names and the NI number can be trimmed, and anonym.plus flags them so you decide.
Is the record uploaded for processing?
No. The desktop app runs on your device with no cloud step, so the special category data stays on your machine.
Will the entry still read after the swap?
Yes. The Replace operator drops a steady label in place of each item, so the dates and event class still make sense without naming the worker.