Offer letter redaction is the removal of personal data from a hiring offer. UK GDPR Recital 26 places truly anonymous data outside the rules, and DPA 2018 s.3(2) sets the test for whether someone remains identifiable. Since 6 April 2020, Employment Rights Act 1996 s.1 has required a written statement of particulars on or before a new starter's first day, and many employers build the offer letter around that same content. anonym.plus marks names, pay, and contacts on your device, so the template can be reused without exposing one person or losing the s.1 structure.
When this applies
The letter states a name, salary, and start date tied to one individual, wrapped around the particulars s.1 requires: job title, pay, hours, and holiday entitlement. You strip the person-specific details so the file can serve as a clean, reusable template while the required particulars stay visible.
How anonym.plus handles it
- Open the letter in anonym.plus on your device.
- Built-in OCR reads a scanned, signed page.
- The app marks name, pay, and contact fields.
- Confirm each marking and keep the role and terms.
- Turn the alias map OFF for irreversible removal.
- Save the cleaned template locally.
What you need to provide
- The document (PDF, DOCX, or scan).
- An operator (Redact for true removal).
- The alias map turned OFF for true anonymity.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | Priya Anand → [EMPLOYEE] |
| Money | MONEY | salary £42,500 → [AMOUNT] |
| Dates | DATE_TIME | start 2026-07-01 → [DATE] |
| Contact | EMAIL_ADDRESS | priya@example.co.uk → [EMAIL] |
| Identifiers | UK_NINO | QQ 12 34 56 C → [NINO] |
| Location | LOCATION | Bristol BS1 5TR → [ADDRESS] |
Compliance achieved
- Targets truly anonymous output under UK GDPR Recital 26.
- Clears data that would otherwise make someone identifiable under DPA 2018 s.3(2).
- Keeps the particulars ERA 1996 s.1 requires, such as job title, pay, and hours, in the reusable template.
- With the alias map OFF, removal is irreversible by design.
Anonymise offer letters offline — see plans & start free →
Limitations & cautions
Recital 26 sets a high bar: data is anonymous only if no one can be singled out under the motivated-intruder test. A rare salary plus a date can still re-identify someone, and an unusual job title in the s.1 particulars can do the same. Generalise those values when you need a public template.
Frequently asked questions
Does an anonymised template still meet the s.1 written-statement rule?
The template is a starting point, not the statement itself. Every new hire still needs their own particulars under ERA 1996 s.1, given by their first day; anonymising a template just keeps the boilerplate reusable without the last hire's details.
When is the file truly anonymous under UK GDPR?
Only when no one can be singled out, per Recital 26. Turn the alias map off and generalise rare values like an unusual salary or job title.
Should I keep a reversible map for a template?
No. For a reusable template, turn the map off so the previous hire's identity cannot be restored from it.