Payroll register de-identification is the removal of personal identifiers from the wage grid an employer keeps to prove what it paid. National Minimum Wage Act 1998 s.9 makes that pay documentation compulsory. Section 10 lets a worker ask to inspect it. anonym.plus marks each name and number on your device, so the totals stay useful while staff data is shielded.
When this applies
For pay reference periods beginning on or after 1 April 2021 the s.9 record must survive six years, up from three. The same grid feeds the real time information return under the Income Tax (PAYE) Regulations 2003. It also feeds the contribution records that Social Security (Contributions) Regulations 2001 Sch. 4 ties to each National Insurance number. Six years is a long time for one file to name everybody.
How anonym.plus handles it
- Open the register in anonym.plus on your device.
- Local OCR reads a scanned printout if needed.
- The tool flags each name, NI number, and bank line.
- Confirm the flags and keep column totals intact.
- Swap or black out the marked items.
- Save the clean grid locally.
What you need to provide
- The register (CSV, XLSX, PDF, or scan).
- An operator: Replace, Redact, or Mask.
- Optional shared map so one worker maps to one alias.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | row: Leah Osborne → [STAFF_1] |
| Identifiers | UK_NINO | QQ 12 34 56 C → [NINO] |
| Financial | MONEY | £4,100.00 → [AMOUNT] |
| Financial | UK_BANK_NUMBER | a/c 00919283 → [ACCOUNT] |
| Dates | DATE_TIME | period end 31/05 → [DATE] |
| Location | LOCATION | site address → [SITE] |
Compliance achieved
- Covers the pay documentation National Minimum Wage Act 1998 s.9 requires, kept six years for pay reference periods from 1 April 2021.
- Leaves the figures a worker may inspect under NMWA 1998 s.10 legible, so an access request still works.
- Keeps the hours evidence that Working Time Regulations 1998 reg. 9 asks an employer to hold for two years.
- Shields the identifiers that Social Security (Contributions) Regulations 2001 Sch. 4 ties to contribution records.
- Counts as a technical measure of the kind UK GDPR Art. 32(1)(a) names, applied before the grid travels.
Anonymise payroll registers offline — see plans & start free →
Limitations & cautions
A small headcount can re-identify a person from a role plus a figure, even after names go. The tool flags named items. Aggregate thin rows yourself, and never de-identify the s.9 record you must be able to produce.
Frequently asked questions
How long must a payroll register be kept?
Six years for pay reference periods beginning on or after 1 April 2021, under National Minimum Wage Act 1998 s.9. Working Time Regulations 1998 reg. 9 adds a two-year record for the weekly hours limit.
Can one worker stay steady across every row?
Yes. Turn on the shared map and the same person maps to the same alias throughout the grid, so the column totals still reconcile.
Does de-identifying a copy change what HMRC can ask for?
No. HMRC and a National Minimum Wage officer look at your source record. The clean grid is for analysts and reviewers who do not need names.