New-Hire Form Redaction with anonym.plus

Clear identity data from a joiner's intake form before it is shared.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

New-hire form redaction is the removal of identifiers from a joiner's intake paper. UK GDPR Art. 13 makes an employer tell a worker, at the moment it collects the data, why it is collected and how long it is kept, while Art. 5(1)(c) limits collection to what the purpose needs. anonym.plus marks names, contacts, and ID numbers on your device, so the form stays useful while the surplus data goes.

When this applies

An intake paper sweeps up a joiner's address, next of kin, and ID numbers on day one, when much of it is only needed later. The employer processes it under Art. 6(1)(b) to perform the contract, and feeds part of it into the written statement that Employment Rights Act 1996 s.1 requires. The rest need not follow the form into a shared folder.

How anonym.plus handles it

  1. Open the intake paper in anonym.plus on your device.
  2. Local OCR reads any scanned attachment.
  3. The tool flags names, contacts, and ID numbers.
  4. Confirm each flag and keep the section headings.
  5. Swap or black out the confirmed items.
  6. Save the clean version locally.

What you need to provide

PII entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONTomas Varga → [JOINER]
ContactEMAIL_ADDRESSt.varga@example.co.uk → [EMAIL]
ContactPHONE_NUMBER+44 161 496 0410 → [PHONE]
IdentifiersUK_NINOQQ 20 45 67 C → [NINO]
LocationLOCATION12 Pine Road, Manchester → [ADDRESS]
DatesDATE_TIMEstart 03/2026 → [DATE]

Compliance achieved

Anonymise new-hire intake forms offline — see plans & start free →

Limitations & cautions

Redaction does not cure over-collection. If a field is not needed at all, Art. 5(1)(c) points at dropping it from the form rather than hiding it later. A rare role plus a start date can still identify a joiner after names go.

Frequently asked questions

Does redacting the form satisfy Art. 13?

No. Art. 13 is about telling the joiner what you collect and why, at the point you collect it. Redaction limits who sees the data afterwards, so treat them as two separate duties.

Which fields can I safely keep?

Whatever the reader of the shared copy genuinely needs, which Art. 5(1)(c) frames as adequate, relevant, and limited. Allow-list the role title and department so the form still makes sense.

Does anything leave my device?

No. The app is fully offline, so the intake paper stays on your machine.