360 Feedback Anonymisation with anonym.plus

Hide both the rater and the subject so candid input stays candid.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

360 feedback anonymisation is the removal of identifiers from a multi-rater report so no contributor can be traced. Two rules pull against each other here. UK GDPR Article 15 gives the subject a right to their own data, while the third-party restriction in Schedule 2 of the Data Protection Act 2018 limits what you must reveal about the raters. anonym.plus marks each name on your device, so the themes stay clear while the raters stay protected.

When this applies

A 360 cycle gathers candid notes from peers and line managers. The subject then asks for their file. You anonymise the raters first, so you can answer the request without naming who said what.

How anonym.plus handles it

  1. Open the multi-rater report in anonym.plus on your device.
  2. Built-in OCR reads any scanned comment sheet.
  3. The app marks rater and subject names.
  4. Confirm each marking and keep the competency headers.
  5. Swap each name for a neutral label.
  6. Save the cleaned copy locally.

What you need to provide

PII entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONrater Olivia Shaw → [RATER]
NamesPERSONsubject M. Patel → [SUBJECT]
ContactEMAIL_ADDRESSolivia@example.co.uk → [EMAIL]
OrgORGANIZATIONDesign Guild → [TEAM]
DatesDATE_TIMEcycle Q2 2025 → [PERIOD]
LocationLOCATIONBristol office → [SITE]

Compliance achieved

Anonymise 360 feedback reports offline — see plans & start free →

Limitations & cautions

A small rater pool is the real risk. With only two peers, a phrase or a known event can reveal who wrote it. Pool the comments or summarise them when the group is tiny.

Frequently asked questions

Can a small team still be anonymous?

Often not. With few raters, a unique remark points back to one person. Recital 26 asks if anyone can be singled out, so pool or paraphrase comments when the group is small.

Must we hand over 360 comments if the subject asks?

You must answer the Article 15 request, but not at any cost. Schedule 2 of the DPA 2018 restricts disclosing information that identifies another person unless that person agrees or it is reasonable to proceed. Redacting the rater is the usual middle path.

Does the tool hide both rater and subject?

Yes. It marks names on both sides, so you can mask the contributor and the person being rated in one pass.

Is the export sent anywhere?

No. The desktop app runs locally with no cloud step, so candid input stays on your machine.