Engagement Survey De-Identification with anonym.plus

Strip respondent traces so staff answer freely and stay unnamed.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

Engagement survey de-identification is the removal of identifiers from staff responses so no respondent is traceable. If you promise anonymity, UK GDPR Article 5(1)(a) makes that promise a fairness and transparency duty, and the ICO's employment guidance on monitoring workers expects you to be straight about what is collected. anonym.plus marks each clue on your device, so the sentiment data stays useful while the people stay protected.

When this applies

A pulse survey gathers open comments alongside scores, and staff were told it is anonymous. You strip the identifiers from the free text first, so the promise is true before leaders read it.

How anonym.plus handles it

  1. Open the response export in anonym.plus on your device.
  2. Built-in OCR reads a scanned paper form.
  3. The app marks names and team labels in comments.
  4. Confirm the markings and keep the score fields.
  5. Swap each clue for a neutral label.
  6. Save the cleaned set locally.

What you need to provide

PII entity types detected

Categoryanonym.plus entity typeExample
NamesPERSON“my lead Mara” → [MANAGER]
OrgORGANIZATIONNight Shift Crew → [TEAM]
LocationLOCATIONFloor 3 → [AREA]
ContactEMAIL_ADDRESSleft in box → [EMAIL]
DatesDATE_TIMEsince 2018 → [TENURE]
DemographicNRPparents group → [GROUP]

Compliance achieved

Anonymise engagement surveys offline — see plans & start free →

Limitations & cautions

Open comments are the main risk. A respondent who names a lead, a shift, and a floor can be pinpointed by combining those clues. Suppress small subgroups before reporting.

Frequently asked questions

Why focus on the open comments?

Because a free-text answer can name a manager or a shift. Combined clues can single out a respondent, which Recital 26 treats as non-anonymous.

We told staff the survey is anonymous. Does that bind us?

In practice, yes. Article 5(1)(a) requires fair and transparent processing, and Article 13 requires clear information at collection. A survey sold as anonymous but stored with identifiers is the kind of gap the ICO's monitoring guidance warns about.

Should I report tiny subgroups?

No. A group of one or two is easy to identify. Suppress or merge small cuts before you share results.

Is the export uploaded?

No. The app is fully offline, so responses stay on your device.