Recruitment Vendor Data Redaction with anonym.plus

Clear candidate identifiers before sharing a file with a recruiting processor.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

Recruitment vendor data redaction is the removal of personal information from a file bound for a processor. UK GDPR Art. 28(3) sets out what a processor contract with a recruitment vendor must cover, and reg. 19 of the Conduct of Employment Agencies and Employment Businesses Regulations 2003 separately expects an agency to get a work-seeker's consent before passing their details to a client. anonym.plus marks identifiers on your device, so a vendor receives only the minimum the role requires.

When this applies

An agency brief or shortlist often carries more personal detail than a vendor needs, and reg. 19's consent expectation does not cover data volunteered beyond what the work-seeker agreed to share. You trim the extra identifiers before the handoff, keeping both the Art. 28 contract terms and the agency-conduct rule in view.

How anonym.plus handles it

  1. Open the file in anonym.plus on your device.
  2. Built-in OCR reads a scanned shortlist page.
  3. The app marks names, contacts, and references.
  4. Confirm each marking and keep role-relevant fields.
  5. Swap or black out the confirmed identifiers.
  6. Save the minimised file locally.

What you need to provide

PII entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONshortlisted Bauer → [CANDIDATE]
ContactEMAIL_ADDRESSbauer@example.co.uk → [EMAIL]
ContactPHONE_NUMBER+44 121 496 3310 → [PHONE]
IdentifiersUK_NINOQQ 12 34 56 C → [NINO]
LocationLOCATIONhome town → [LOCATION]
OrgORGANIZATIONcurrent firm → [EMPLOYER]

Compliance achieved

Anonymise recruitment vendor files offline — see plans & start free →

Limitations & cautions

Article 28 requires a written processor contract and safeguards this app does not provide, and reg. 19 consent covers only what the work-seeker actually agreed to share. It minimises fields only. Keep a compliant data-processing agreement and confirm consent scope with the vendor.

Frequently asked questions

What must an Art. 28 processor contract with a recruitment vendor cover?

Article 28(3) requires terms on the subject matter, duration, and nature of processing, plus safeguards such as confidentiality and assistance with data-subject requests. anonym.plus supports the minimisation side by trimming fields before sharing, not the contract itself.

Reg. 19 of the 2003 Conduct Regulations generally expects a work-seeker's consent before an agency passes their information to a client. Extra fields beyond that consent should not travel with the file at all.

Is the file uploaded before it reaches the vendor?

No. The app runs locally, so candidate detail stays with you until you choose to send the minimised file.