Rejected Candidate Record Anonymisation with anonym.plus

Strip personal data from a rejected applicant's file to meet an erasure duty.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

Rejected candidate record anonymisation is the irreversible removal of personal data from a closed application. UK GDPR Art. 17(1)(a) grants a right to erasure once data is no longer needed for its purpose, but Equality Act 2010 s.123(1)(a) gives a rejected candidate three months, less one day, to bring a tribunal claim, which is why many employers hold the file briefly rather than erasing it the day a role is filled. anonym.plus marks every identifier on your device, so the file is anonymised rather than merely hidden once that window has passed.

When this applies

After a role is filled, an unsuccessful applicant's data must not linger past its purpose, but erasing it before the s.123 claim window closes can also destroy the evidence an employer would need to defend a claim. You anonymise the record once that window has passed, so nothing personal remains.

How anonym.plus handles it

  1. Open the closed file in anonym.plus on your device.
  2. Built-in OCR reads any scanned attachment.
  3. The app marks all names, contacts, and references.
  4. Confirm the markings across every page.
  5. Turn the alias map OFF for irreversible removal.
  6. Save the anonymised record locally.

What you need to provide

PII entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONOmar Reyes → [REMOVED]
ContactEMAIL_ADDRESSomar@example.co.uk → [REMOVED]
ContactPHONE_NUMBER+44 7700 906640 → [REMOVED]
IdentifiersUK_NINOQQ 12 34 56 C → [REMOVED]
LocationLOCATIONhome address → [REMOVED]
IdentifiersUK_PASSPORTpassport 123456789 → [REMOVED]

Compliance achieved

Anonymise rejected candidate records offline — see plans & start free →

Limitations & cautions

True erasure means no copy can re-identify the person, and erasing too early can leave an employer without evidence if a claim is brought within the s.123 window. Anonymise every copy once that window has safely passed, not just the primary record, and check any retention basis with the ICO's guidance.

Frequently asked questions

When does the erasure right apply here?

UK GDPR Art. 17(1)(a) applies once data is no longer needed for its purpose, such as a closed unsuccessful application, but most employers wait until the Equality Act 2010 s.123 claim window has passed before acting on it.

Why not erase the file immediately after rejection?

A rejected candidate has three months less one day under s.123(1)(a) to bring a tribunal claim, sometimes extended by ACAS early conciliation. Erasing the file too soon can leave nothing to defend a claim with if one arrives.

Is the removal reversible here?

No, when the alias map is off. That makes anonymisation irreversible, as true erasure requires.