Cross-border disclosure redaction is the removal of personal data before a transfer that UK GDPR Art. 48 restricts. Where the request comes through the Evidence (Proceedings in Other Jurisdictions) Act 1975 — the UK's own mechanism for obtaining evidence here for foreign proceedings — a UK court order still sits alongside a separate UK GDPR transfer analysis. anonym.plus runs on a local device, so each record is cleared in-region before it crosses any border.
When this applies
A foreign court may seek records held in the UK, typically routed through the Evidence (Proceedings in Other Jurisdictions) Act 1975 rather than served directly. UK GDPR Art. 48 limits transfers ordered by a foreign court or authority on that basis alone, and Art. 49(1)(e) — the derogation for legal claims — is read narrowly, so you clean each file in-region first rather than relying on it for a bulk export.
How anonym.plus handles it
- Open the records in anonym.plus on a local UK device.
- It flags names, IDs, and contacts in each file.
- Set the language so date and ID formats parse.
- Confirm the flags before the data is sent abroad.
- Replace or mask each confirmed value.
- Save the cleared records on your local device.
What you need to provide
- The records (PDF, DOCX, XLSX, or scan).
- A language setting for correct ID parsing.
- Replace with the map off for true anonymity.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | Mr. Barlow → [NAME] |
| Identifiers | IBAN_CODE | GB29 NWBK... → [IBAN] |
| Dates | DATE_TIME | 12/03/2026 → [DATE] |
| Contact | EMAIL_ADDRESS | name@firma.co.uk → [EMAIL] |
| Location | LOCATION | 5 Castle Street → [ADDRESS] |
| Identifiers | PHONE_NUMBER | +44 7700... → [PHONE] |
Compliance achieved
- Clears records in-region before a transfer restricted by UK GDPR Art. 48.
- Recognises that requests routed through the Evidence (Proceedings in Other Jurisdictions) Act 1975 still need a separate UK GDPR transfer ground.
- Treats the Art. 49(1)(e) legal-claims derogation as narrow, not a licence for a bulk export.
- Detects IDs across 48 languages, all processed on-device.
Anonymise cross-border disclosure offline — see plans & start free →
Limitations & cautions
Art. 48 is a real tension between foreign proceedings and UK law. Clearing records in-region lowers the conflict, but it does not resolve every cross-border question. Take local advice on whether the export is lawful, even after redaction.
Frequently asked questions
What does UK GDPR Art. 48 restrict?
It says a foreign court or authority order is not, by itself, a lawful basis to transfer personal data. A separate UK GDPR transfer ground is still needed, even where the request arrives through the Evidence (Proceedings in Other Jurisdictions) Act 1975.
How does in-region redaction help?
Clearing personal data on a UK device before it leaves reduces what actually crosses the border, which lowers the UK GDPR exposure of the exported material regardless of which legal route the foreign request took.
Does it parse different ID and date formats?
Yes. With the right language set, IBANs, phone formats, and DD/MM/YYYY dates are caught before anything is sent abroad.