Personnel Record Subject Access Redaction with anonym.plus

Clear third-party data before disclosing a personnel file under a DSAR.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

Subject access redaction is the removal of third-party identifiers from a dossier released under UK GDPR Art. 15. The worker is entitled to their own data, while Art. 15(4) says a copy must not adversely affect the rights and freedoms of others. anonym.plus marks other people's names and IDs on your device, so the disclosure stays useful without exposing colleagues.

When this applies

Art. 12(3) gives you one month to respond, extendable by two further months for a complex request. A personnel file that names reviewers, complainants, and colleagues has to be worked through in that window. Schedule 2 Part 3 of the DPA 2018 carries the restriction that protects information about another individual, which is what most of that work turns on.

How anonym.plus handles it

  1. Open the requested dossier in anonym.plus on your device.
  2. Local OCR reads scanned review and note pages.
  3. The tool flags third-party names and IDs.
  4. Keep the requesting worker's own data intact.
  5. Swap or black out the confirmed items.
  6. Save the clean copy locally.

What you need to provide

PII entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONcolleague named → [THIRD_PARTY]
NamesPERSONreviewer named → [REVIEWER]
IdentifiersUK_NINOthird-party NINO → [NINO]
ContactEMAIL_ADDRESSmanager email → [EMAIL]
ContactPHONE_NUMBER+44 20 7946 0147 → [PHONE]
DatesDATE_TIMEreview date → [DATE]

Compliance achieved

Anonymise subject access disclosures offline — see plans & start free →

Limitations & cautions

The exemptions decide what a worker may see, and the tool does not apply them. It removes identifiers you select. Whether to disclose without a third party's consent is a judgement for you, on the DPA 2018 schedules and ICO guidance.

Frequently asked questions

Whose data should I redact before disclosure?

Usually third parties. Art. 15 entitles the worker to their own data, and Art. 15(4) limits a copy that would harm others' rights, so colleagues and reviewers are the usual candidates.

How long do I have to respond?

Art. 12(3) sets one month from receipt, extendable by two further months where the request is complex or there are several. Tell the requester about any extension within that first month.

Must I always remove a third party's name?

Not always. DPA 2018 Sch. 2 Part 3 lets you weigh whether it is reasonable to disclose without that person's consent. The tool flags the names; the balancing decision stays yours.