Employment-contract redaction is the removal of staff PII, including special-category data under UK GDPR Art. 9. Art. 9(1) bars health, union, and ethnicity data unless a gateway applies. For employment the gateway is Art. 9(2)(b), and DPA 2018 Sch. 1 para 1 supplies the domestic authorisation. Part 4 of that schedule separately asks a controller relying on it to keep an appropriate policy document.
When this applies
A hire packet holds pay, a National Insurance number, and bank details, sometimes with a health or union note. The written statement ERA 1996 s.1 requires has been due on or before the first day of work since 6 April 2020, so the packet is made early and copied often. You clear both sets of data before it is reused or sent for audit.
How anonym.plus handles it
- Open the packet in anonym.plus on your device.
- The tool flags the hire's name, pay, and bank fields.
- Health, union, or disability notes get flagged as sensitive.
- Confirm the flags and keep the role and term text.
- Swap or black out the confirmed data.
- Save the clean file on your machine.
What you need to provide
- The hire packet (PDF, DOCX, or scan).
- An operator (Redact for slim audit copies).
- Optional allow-list for standard job titles.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | Lena Walsh → [EMPLOYEE] |
| Pay | MONEY | £62,000 → [SALARY] |
| Banking | IBAN_CODE | GB29 NWBK ... → [IBAN] |
| Sensitive | MEDICAL_LICENSE | disability note → [SENSITIVE] |
| Identifiers | UK_NINO | QQ 12 34 56 C → [NINO] |
| Contact | EMAIL_ADDRESS | l.walsh@example.co.uk → [EMAIL] |
Compliance achieved
- Strips the special categories named in UK GDPR Art. 9(1): health, union, ethnicity.
- DPA 2018 Sch. 1 para 1 carries the employment condition; Part 4 of the same schedule asks for a policy document.
- Flags the National Insurance number that PAYE records carry to HMRC.
- Keeps the written particulars ERA 1996 s.1 requires readable as a template.
- On-device AES-256-GCM guards the working files.
Anonymise employment contracts offline — see plans & start free →
Limitations & cautions
Health, union, and ethnicity notes are sensitive and need extra care. Free-text clauses can bury such clues, so review the flags. A rare role at a small employer may still point to one hire after the direct IDs go.
Frequently asked questions
Which staff data does UK GDPR Art. 9 treat as special?
Health, trade-union membership, ethnicity, religion, sex life, and genetic or biometric data. Art. 9(1) bars processing unless a gateway opens, and for employment that gateway is Art. 9(2)(b). DPA 2018 Sch. 1 para 1 is the domestic law that gateway needs.
Is salary treated as personal data?
Yes. Pay tied to a named hire identifies that person, so it is personal data like any other field. The tool flags the figure and the name together for removal.
What is the appropriate policy document?
Part 4 of DPA 2018 Schedule 1 asks a controller relying on most of the schedule's conditions to keep a short written policy explaining its compliance and retention. It is a record you hold, not something you file. Redacting a reused packet does not replace it.