Transparency and freedom of information: mandatory anonymization
Public administrations face permanent tension between transparency and data protection. Transparency laws require publishing information, while the GDPR prohibits revealing third parties' personal data. Document anonymization is the bridge that allows complying with both regulations without rejecting legitimate access requests.
The legal framework in Spain and the EU
- Law 19/2013: right of access to public information with exceptions for personal data protection.
- GDPR Article 15: data subject access right, distinct from general citizen access.
- Directive (EU) 2019/1024: reuse of public sector data with privacy safeguards.
- Ombudsman recommendations: reasonable deadlines and anonymization before publication.
Recommended workflow
1. Request receipt
Log the request, identify the document, and assess whether it contains third-party personal data.
2. Automated anonymization
Process the PDF with AI to detect and remove names, IDs, addresses, and other identifiers.
3. Human review
An official verifies the result before delivery, especially for sensitive documents.
4. Delivery and logging
Publish or send the anonymized document and log the action for traceability.
Deadlines and volume: the case for automation
An average municipality receives hundreds of requests per year. Manually anonymizing each document takes 10 to 20 minutes per file. With legal deadlines of one month (extendable), request backlogs can overwhelm small administrative units. Automation reduces processing time to seconds while maintaining the quality and traceability required by the GDPR.
Work in a public administration with high request volumes?
Request information for public bodies