Personnel file redaction is the removal of special-category data from a staff record. UK GDPR Art. 9(1) bars processing health, trade-union, and similar data unless a gateway opens, and for employment that gateway is Art. 9(2)(b), read with DPA 2018 s.10(2) and Sch. 1 Part 1 para 1. anonym.plus marks each item on your device, so the file stays useful while the protected data goes.
When this applies
A staff record gathers fit notes, union subscriptions, and ID numbers over years. Sch. 1 Part 4 of the DPA 2018 asks an employer relying on the employment condition to hold an appropriate policy document covering that data, and Art. 5(1)(e) says none of it should outlive its purpose. Both point the same way before the dossier moves between teams.
How anonym.plus handles it
- Open the staff record in anonym.plus on your device.
- Local OCR reads scanned notes and certificates.
- The tool flags names, ID numbers, and contact data.
- Review health and union mentions with extra care.
- Swap or black out the confirmed items.
- Save the clean dossier locally.
What you need to provide
- The staff record (PDF, DOCX, mixed scans).
- An operator (Replace keeps the file readable).
- Optional alias map across linked documents.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | Lena Harrington → [STAFF] |
| Identifiers | UK_NINO | QQ 88 19 08 C → [NINO] |
| Contact | EMAIL_ADDRESS | l.harrington@example.co.uk → [EMAIL] |
| Dates | DATE_TIME | DOB 1988 → [DOB] |
| Location | LOCATION | home address → [ADDRESS] |
| Contact | PHONE_NUMBER | +44 20 7946 0147 → [PHONE] |
Compliance achieved
- Shields the classes UK GDPR Art. 9(1) protects: health, trade-union membership, ethnicity, religion, sex life, genetics, biometrics.
- Backs the employment gateway in Art. 9(2)(b), which DPA 2018 s.10(2) and Sch. 1 Part 1 para 1 open for UK employers.
- Complements the appropriate policy document that DPA 2018 Sch. 1 Part 4 expects alongside that condition.
- Serves storage limitation under UK GDPR Art. 5(1)(e), and the ICO employment records guidance that applies it to HR files.
- Covers 340+ PII types across 48 languages, with AES-256-GCM at rest.
Anonymise personnel files offline — see plans & start free →
Limitations & cautions
Art. 9 data often sits in free-text notes rather than labelled fields. The tool flags named items, yet it cannot judge when a sentence implies a condition or a belief. Read narrative notes yourself before you share the dossier.
Frequently asked questions
What counts as special-category data in a staff file?
UK GDPR Art. 9(1) lists health, trade-union membership, ethnicity, religion, sex life, and genetic or biometric data. anonym.plus flags the named identifiers around them so you can apply the article to a shared copy.
Do I still need an appropriate policy document?
Yes. Redaction does not replace it. DPA 2018 Sch. 1 Part 4 expects that document whenever you rely on the employment condition, and the ICO looks for it during an enquiry.
Can it read a scanned fit note?
Yes. Local OCR reads the image first, so identifiers on a scanned note are flagged for review before anything is removed.