FOI Email Release Redaction with anonym.plus

Clear personal data from a message thread before you release it under FOIA.

An FOI email release is the version of a message thread you give a requester. FOIA 2000 s.40 exempts personal data whose disclosure would breach the data protection principles. anonym.plus marks that data in headers and bodies on your own device.

When this applies

A requester makes an FOI request for staff correspondence. The thread carries personal addresses, private phone numbers, and signature blocks with home details.

How anonym.plus handles it

  1. Open the mailbox export in anonym.plus on your device.
  2. The tool scans headers, bodies, and signature blocks.
  3. It flags personal addresses, phones, and contacts.
  4. Keep work addresses for officials in their role.
  5. Black out or swap the private PII, then review.
  6. Save the cleared thread on your machine.

What you need to provide

PII entity types detected

Categoryanonym.plus entity typeExample
ContactEMAIL_ADDRESSpersonal inbox → [EMAIL]
ContactPHONE_NUMBERprivate mobile → [PHONE]
NamesPERSONprivate citizen → [PERSON]
LocationLOCATIONsignature address → [ADDRESS]
IdentifiersNATIONAL_IDemployee no. → [ID]
AccountsUK_BANKaccount in body → [ACCOUNT]

Compliance achieved

Anonymise FOI email releases offline — see plans & start free →

Limitations & cautions

Section 40 needs a data-protection and fairness judgment. The tool flags PII; the withholding call is yours. Other exemptions may apply to advice or policy content it does not judge. Review each thread against the right rule.

Frequently asked questions

Do work addresses get withheld?

Usually not for officials in their role. Personal contacts are. Use an allow-list to keep work addresses while you redact private ones.

Does it read PST and EML files?

Yes. Common mailbox export formats are supported, and the tool scans the header, body, and signature block of each message.

Where is the export processed?

On your own device. The app is offline, so a sensitive mailbox never reaches a cloud service.