Payroll vendor export redaction is the removal of personal identifiers from a wage file before a processor handoff under UK GDPR Art. 28. That article governs the duties between a controller and the processor it engages. anonym.plus marks each name and number on your device, so the file stays usable while staff data is minimised.
When this applies
Such a handoff sends wage data to an outside processor for one task. You strip the identifiers they do not need before it leaves your control.
How anonym.plus handles it
- Open the file in anonym.plus on your device.
- Local OCR reads a scanned page if present.
- The tool flags names, NI numbers, and bank lines.
- Confirm the flags and keep only fields the task needs.
- Swap or black out the marked items.
- Save the clean copy locally before handoff.
What you need to provide
- The file (CSV, XLSX, JSON, or scan).
- An operator (Replace or Mask per field).
- Optional shared map so a worker stays steady.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | row P. Lund → [STAFF_1] |
| Identifiers | UK_NINO | NI number → [NINO] |
| Financial | UK_BANK_NUMBER | a/c 00919283 → [ACCOUNT] |
| Financial | MONEY | net £4,210 → [AMOUNT] |
| Contact | EMAIL_ADDRESS | lund@example.co.uk → [EMAIL] |
| Dates | DATE_TIME | period 06/2026 → [DATE] |
Compliance achieved
- Supports data minimisation before a handoff under UK GDPR Art. 28.
- Strip fields the processor does not need for the task.
- Offline work keeps the file in your control until you send it.
Anonymise payroll vendor exports offline — see plans & start free →
Limitations & cautions
Art. 28 still needs a written processor contract; redaction does not replace it. The tool removes identifiers only. Confirm the legal basis and contract terms with counsel.
Frequently asked questions
What does UK GDPR Art. 28 require?
It governs controller-processor duties, including a written contract and data limits. anonym.plus helps you minimise the file before handoff.
Can I keep only the fields the task needs?
Yes. Mask or strip fields per column, so the processor receives only what it requires.
Is the file uploaded?
No. The app is offline. You control when the clean copy goes out.