Whistleblowing report redaction is the removal of data that could expose the source. Sections 43A to 43L of the Employment Rights Act 1996 — inserted by the Public Interest Disclosure Act 1998 (PIDA) — define a qualifying and protected disclosure; s.47B then bars detriment for making one, and s.103A treats a dismissal for it as automatically unfair. Banks, larger insurers, and other bigger FCA-regulated firms must also run a whistleblowing function under the FCA Handbook's SYSC 18. anonym.plus strips names and contacts on your device, so no clue leaks.
When this applies
A disclosure reaches your compliance team, or the whistleblowers' champion SYSC 18 requires at a regulated firm, and must move to investigators. The source's name, email, and writing style can give them away if the file is shared raw.
How anonym.plus handles it
- Open the report in anonym.plus on your device.
- The tool flags the source's name, email, and phone.
- It also flags named colleagues and accused parties.
- Confirm each flag, then redact or swap it.
- Save the protected copy with no network call.
What you need to provide
- The report (PDF, DOCX, TXT, or web-form export).
- An operator: Redact to remove, Replace for a readable copy.
- Optional allow-list to keep generic role terms.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | source Daniel Owusu → [DISCLOSER] |
| Contact | EMAIL_ADDRESS | d.owusu@corp.co.uk → [EMAIL] |
| Contact | PHONE_NUMBER | 07700 900221 → [PHONE] |
| Names | PERSON | accused manager → [SUBJECT] |
| Location | LOCATION | Manchester site → [LOCATION] |
| Identifiers | UK_NINO | staff no. A4471 → [ID] |
Compliance achieved
- Supports identity confidentiality for a protected disclosure under ERA 1996 ss.43A-43L (inserted by PIDA 1998).
- Helps a regulated firm run the whistleblower confidentiality expected by FCA SYSC 18.
- Local processing keeps the discloser's clues off any cloud.
- On-device AES-256-GCM guards the working files.
- Anonymous output sits outside scope by UK GDPR Recital 26.
Anonymise whistleblowing reports offline — see plans & start free →
Limitations & cautions
Names and contacts go, but writing style and rare facts can still point to a source. Review the narrative for such detail. The tool removes direct IDs; a human must judge indirect identity clues.
Frequently asked questions
What does PIDA actually protect?
The Public Interest Disclosure Act 1998 inserted sections 43A to 43L into the Employment Rights Act 1996, setting out which disclosures qualify for protection. Section 47B then bars the employer from subjecting the worker to a detriment for making one, and section 103A makes a dismissal for it automatically unfair.
Does every firm need a formal whistleblowing function?
Not every firm. FCA Handbook SYSC 18 requires banks, larger insurers, and other bigger regulated firms to appoint a whistleblowers' champion and run internal arrangements for staff to raise concerns. Anonymising the report before wider circulation supports that confidentiality expectation whether or not SYSC 18 formally applies to your firm.
Can I keep the substance of the disclosure?
Yes. The allegations and evidence stay. Only data that points to the source or named third parties is removed or swapped.