Bank mandate form redaction is the removal of banking data from a salary payment form. The employer processes it under UK GDPR Art. 6(1)(b) to perform the contract, and Art. 32(1)(a) names encryption and pseudonymisation as measures fit for data of this kind. anonym.plus marks the six-digit sort code and eight-digit account number on your device, so the page stays clear while the payment details go.
When this applies
This is the one sheet in a joiner pack that can move money. It feeds the net figure shown on the itemised pay statement that Employment Rights Act 1996 s.8 gives the worker, and any change to it risks the deduction rules in s.13. A bureau or a shared folder needs to know the instruction exists, not the account behind it.
How anonym.plus handles it
- Open the signed form in anonym.plus on your device.
- Local OCR reads a scanned, signed page.
- The tool flags sort codes, account numbers, and the name.
- Apply Mask to keep only the last digits, or Replace.
- Confirm no full value remains anywhere.
- Save the clean form locally.
What you need to provide
- The mandate (PDF, DOCX, or scan).
- The Mask operator set to keep the last few digits.
- Optional allow-list for the bank name.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Financial | UK_SORT_CODE | 20-00-00 → [SORT_CODE] |
| Financial | UK_BANK_NUMBER | 4412 9087 → ****9087 |
| Names | PERSON | Priya Nair → [WORKER] |
| Identifiers | UK_NINO | QQ 44 12 90 C → [NINO] |
| Contact | EMAIL_ADDRESS | p.nair@example.co.uk → [EMAIL] |
| Dates | DATE_TIME | signed 01/2026 → [DATE] |
Compliance achieved
- Applies a measure of the type UK GDPR Art. 32(1)(a) names, before the page is copied to anyone outside payroll.
- Leaves the contract basis in Art. 6(1)(b) intact, since payroll keeps the unmasked source it needs to pay.
- Protects the figures behind the itemised pay statement that Employment Rights Act 1996 s.8 gives every worker.
- Helps keep changes auditable, which matters where the deduction rules in ERA 1996 s.13 are in play.
- Masks the six-digit sort code and eight-digit account, leaving only the last digits.
Anonymise bank mandate forms offline — see plans & start free →
Limitations & cautions
Payroll still needs the full sort code and account number to pay the worker, so keep your source and redact only a shared copy. The tool masks what it detects; check faint scans, where a handwritten digit can be misread.
Frequently asked questions
How much of an account number may remain?
A common practice keeps only the last few digits. anonym.plus masks the rest, including the sort code, in one pass across the page.
Does redaction change what the pay statement must show?
No. Employment Rights Act 1996 s.8 governs the itemised pay statement given to the worker, which is a separate document. Masking the payment instruction does not alter it.
Is the signed form uploaded?
No. The app is fully offline, so financial data never leaves your device.