Safety record batch redaction is the removal of personal data from a whole folder in one run, tied to the recordkeeping that supports the Health and Safety at Work etc. Act 1974. anonym.plus processes up to 20 files at a time on your device, with a shared map so one worker maps to one alias everywhere.
When this applies
A site keeps many logs, reports, and forms that name the same crew. One-by-one work risks drift, so a batch run applies the same rule across the whole set.
How anonym.plus handles it
- Point anonym.plus at the site folder on your machine.
- It scans each file for names, conditions, and references.
- Local OCR reads any scanned pages in the set.
- A shared map keeps repeat workers steady across files.
- Review the summary and fix low-confidence flags.
- Save the clean set locally.
What you need to provide
- A folder of EHS files (PDF, XLSX, mixed).
- The shared label map turned on for steady results.
- An operator (Replace works well for a site set).
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | worker across files → [WORKER_1] |
| Health | MEDICAL_CONDITION | injuries → [CONDITION] |
| NI number | UK_NINO | NI numbers → [NINO] |
| Dates | DATE_TIME | case dates → [DATE] |
| Contact | EMAIL_ADDRESS | emails → [EMAIL] |
| Org | ORGANIZATION | site names → [SITE] |
Compliance achieved
- Applies one standard across a folder built on the written safety policy an employer with five or more employees keeps under HSWA 1974 s.2(3), and the recorded findings and arrangements in Management of Health and Safety at Work Regs 1999 reg. 3(6) and reg. 5.
- Respects that retention differs by record: at least three years for a RIDDOR 2013 record, 40 years for a health record under COSHH 2002 reg. 11, 40 or 5 years for monitoring under reg. 10, and two years for working time records under Working Time Regs 1998 reg. 9.
- Helps justify keeping the core record while identifiers go: a personal injury claim runs for three years under Limitation Act 1980 s.11 from the date of knowledge in s.14, which a court may disapply under s.33.
- Supports storage limitation under UK GDPR Art. 5(1)(e) and the record of processing activities in Art. 30. Turn the shared map off when the set must be truly anonymous under Recital 26; the whole run stays offline.
Anonymise safety record sets offline — see plans & start free →
Limitations & cautions
A mixed folder of scans and native files leans on OCR for images, so review low-confidence flags. The shared map can re-link the set if kept; turn it off when you need true anonymity.
Frequently asked questions
How does batch mode keep one worker steady?
A shared map logs each person once, so the same worker maps to the same alias in every file across the folder.
How many files can one run handle?
Up to 20 per batch, all processed locally with OCR for any scanned pages.
Does batch work upload anything?
No. The whole run is offline, so site data stays on your machine.