Anonymising Foreign Conviction Certificates – UK GDPR-compliant anonymisation per UK GDPR Art. 10
Foreign criminal conviction certificates — required from overseas jurisdictions for employment vetting in regulated UK sectors — carry criminal-conviction data from non-UK legal systems that falls under UK GDPR Art. 10 when processed in the UK. anonym.legal pseudonymises the subject's personal identifiers across translated and original foreign conviction certificates, enabling UK vetting officers to assess the disclosure scope without unnecessary personal-data retention.
When this applies
This task applies when foreign criminal conviction certificates are reviewed by UK vetting officers, HR professionals, or legal advisers assessing the relevance of overseas criminal records for regulated employment in the UK, and those reviewers require the conviction details but not the subject's personal identifiers.
How anonym.legal handles it
- Upload the foreign conviction certificate and any certified translation together as a batch.
- The engine identifies the subject's name (in original and transliterated forms), date of birth, nationality, and certificate reference number.
- Personal identifiers are pseudonymised consistently across both the original and the translation.
- Offence descriptions, court names, conviction dates, and sentencing information are preserved in clear text.
- A reversible mapping table is produced with UK data residency.
- The pseudonymised certificate and translation are released for vetting review; originals are restored for any formal employment decision.
What you provide
- Foreign criminal conviction certificate (original language)
- Certified translation (if available)
- Issuing-country context notes (to assist offence-category assessment)
Limitations & cautions
- The legal equivalence of foreign offences to UK offences is a specialist legal question requiring expert advice — the tool pseudonymises personal data but does not assess offence equivalence or rehabilitation status under the ROA 1974.
- Some countries' criminal record certificates use national identification numbers as primary identifiers — these are detected and pseudonymised alongside the subject's name and date of birth.
FAQ
Does UK GDPR Art. 10 apply to foreign conviction data processed in the UK?
Yes. UK GDPR Art. 10 applies to criminal-conviction data regardless of the jurisdiction in which the offence was committed, provided the processing occurs in the UK or relates to persons in the UK.
How does the tool handle certificates in non-Latin scripts?
The engine supports a wide range of scripts and character sets. Transliterated versions and certified translations are processed alongside originals; personal identifiers are detected and pseudonymised in all versions consistently.
Can a pseudonymised foreign conviction certificate be used for a DBS application?
DBS applications require the subject's real identity. The pseudonymised certificate is for the vetting officer's preliminary legal review only; re-identify using the mapping key before submitting any formal application.