Privilege Log Redaction with anonym.plus

Clear PII from the index while each withholding reason stays clear.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

Privilege-log redaction is the removal of personal data from the index that describes withheld items. CPR 31.19(3) requires you to state in writing the grounds for withholding inspection, without giving away the privileged content itself. anonym.plus runs on your device, so the description stays testable while third-party names in the log come out.

When this applies

Such an index must describe withheld documents without waiving the claim, whether the ground is legal advice privilege or litigation privilege — the dominant-purpose test set out in Waugh v British Railways Board [1980] AC 521. Its author, recipient, and subject fields often carry names you must mask before the log itself is shared with the other side or a costs judge.

How anonym.plus handles it

  1. Load the list into anonym.plus on your device.
  2. The tool scans author, recipient, and description fields.
  3. It flags names, dates, and contacts in each row.
  4. Confirm the flags; keep the stated basis text intact.
  5. Replace or mask the confirmed PII.
  6. Save the clean index with no network call.

What you need to provide

PII entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONFrom: J. Marsh → [AUTHOR]
NamesPERSONTo: Dr. Linton → [RECIPIENT]
DatesDATE_TIMESent 04/02 → [DATE]
ContactEMAIL_ADDRESSj.marsh@firm.co.uk → [EMAIL]
IdentifiersUK_NINONINO in subject → [NINO]
Document IDsPERSONRef PRIV-0042 → [DOC_ID]

Compliance achieved

Anonymise privilege logs offline — see plans & start free →

Limitations & cautions

Each row must still describe its item enough to test the claim. Mask names, but do not strip so much that the basis becomes vague. Over-redaction can itself draw a challenge, so review every entry.

Frequently asked questions

Will masking names waive the claim?

No. CPR 31.19(3) asks you to state the grounds for withholding, not to name every person involved. Masking PII while keeping the stated basis keeps the entry testable and the claim intact.

Can one person map to a steady alias across rows?

Yes. A name map gives each person one alias, so the index reads consistently without real names, which matters most where the same solicitor or custodian appears across dozens of entries.

What happens if the other side challenges an entry?

CPR 31.19(6) lets the court inspect the document itself, without notice to the other party, to decide whether the privilege claim holds. Your log only needs to be clear enough to let the court test it, not to win the argument on its own.