Payslip redaction is the removal of personal identifiers from an itemised pay statement. Employment Rights Act 1996 s.8 gives a worker the right to that statement at or before the time wages are paid. It must show gross pay, every deduction and its purpose, and the net figure. anonym.plus marks each name, number, and amount on your own device, so the slip stays readable while the identity data goes.
When this applies
The s.8 right reached every worker, not just employees, on 6 April 2019. Where pay varies with time worked, the slip must also show the hours behind it. Payroll then files the same figures to HMRC on a real time information return under the Income Tax (PAYE) Regulations 2003 reg. 67B. A bureau or an audit folder needs the layout, not the National Insurance number beside it.
How anonym.plus handles it
- Open the slip in anonym.plus on your workstation.
- Local OCR reads a scanned or printed copy.
- The tool flags the NI number, bank line, and earnings.
- Confirm each flag and keep the period dates intact.
- Swap or black out the marked items.
- Save the clean file locally with no network call.
What you need to provide
- The slip (PDF, DOCX, or scan).
- An operator: Replace (swap), Redact (black out), or Mask (partial).
- Optional alias map if you must re-link the worker later.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Identifiers | UK_NINO | QQ 12 34 56 C → [NINO] |
| Names | PERSON | Daniel Hughes → [STAFF] |
| Financial | MONEY | £2,408.55 → [AMOUNT] |
| Financial | UK_BANK_NUMBER | a/c 12345678 → [ACCOUNT] |
| Dates | DATE_TIME | pay date 12/04 → [DATE] |
| Contact | EMAIL_ADDRESS | d.hughes@example.co.uk → [EMAIL] |
Compliance achieved
- Keeps the statement that Employment Rights Act 1996 s.8 requires readable: gross pay, each deduction, and the net figure.
- Leaves room for the standing statement of fixed deductions that ERA 1996 s.9 allows, which runs for twelve months.
- Guards the record behind an unlawful-deduction claim under ERA 1996 s.13, which s.23 puts on a three-month clock.
- Shields the National Insurance number that the Income Tax (PAYE) Regulations 2003 reg. 67B sends to HMRC on or before payday.
- Working copies are kept safe with AES-256-GCM, across 340+ PII types and 48 languages.
Anonymise payslips offline — see plans & start free →
Limitations & cautions
A slip can still point at a person through a rare job title or an odd figure. The tool flags named items, not every indirect clue. Keep your own s.8 source intact and redact the copy that circulates. A worker can refer a missing or defective statement to an employment tribunal under s.11.
Frequently asked questions
Which law sets what a UK payslip must contain?
Employment Rights Act 1996 s.8. It requires gross pay, the amount and purpose of every deduction, and the net figure. Since 6 April 2019 it also covers hours where pay varies with time worked.
Can I redact the payslip I keep on file?
Keep your source. Payroll needs it to answer an HMRC query, and PAYE records are expected on file for three years after the end of the tax year. Redact the copy you send out.
Will the statement still read correctly after the swap?
Yes. The Replace operator drops a steady label in place of each identifier. The layout still makes sense and names no real person.