Sharing a candidate's resume internally — with hiring managers, panel members, or external clients — creates a data privacy problem that most HR teams haven't fully solved. Every time a full resume is forwarded, you're distributing personal data: names, addresses, phone numbers, email addresses, and often sensitive signals like graduation year, school names, and even embedded photos.
This guide explains what PII is in the context of hiring, why removing it matters legally and ethically, and how to do it quickly using a free, browser-based tool that never uploads your files to any server.
📌 In a hurry? Skip to the tool: nullifycv.com — upload a PDF or DOCX, select your redaction targets, download the redacted file. Basic redaction is free with no account; CV processing stays in your browser.
PII stands for Personally Identifiable Information — any data that can be used to identify a specific individual. In the context of candidate resumes, PII typically includes:
The distinction between direct and indirect identifiers matters. Direct identifiers obviously reveal who the candidate is. Indirect identifiers are subtler — a graduation year of 2004 tells a recruiter a candidate is likely in their early 40s, triggering potential age bias. A postcode in a particular area can signal socioeconomic background or ethnicity. Removing both categories is what makes blind hiring genuinely effective.
Research consistently shows that identical resumes receive different treatment based on superficial personal characteristics. A widely cited study found that resumes with white-sounding names received 50% more callbacks than identical resumes with Black-sounding names. Similar studies have demonstrated bias based on gender, age, school prestige, and postcode.
Removing PII before resumes reach the scoring panel is the most direct way to interrupt this bias at the source. It doesn't rely on changing human psychology — it simply removes the data that triggers the bias.
Under GDPR Article 5(1)(c), personal data must be "adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed." When a hiring panel needs to evaluate whether a candidate has the right skills and experience, they don't need the candidate's home address or phone number. Sharing a full resume with those details to a panel of five people creates unnecessary data exposure.
By stripping PII before internal distribution, you support GDPR data minimisation principles and reduce the personal data footprint across your hiring process.
Under GDPR Article 17, candidates have the right to request deletion of their personal data. If you've forwarded a full resume to ten people internally, honouring an erasure request becomes complex. A de-identified copy shared with the panel may still contain identifying information — making erasure requests simpler to manage.
In the United States, EEOC guidelines and employment law under Title VII, the ADEA (Age Discrimination in Employment Act), and state-level laws like Illinois BIPA create strong incentives for structured blind hiring. Removing graduation years (age proxy), school names, and demographic signals from resumes before panel review is a documented, defensible practice.
The right level of redaction depends on your goal. Here are three common approaches:
Everything in standard PII, plus:
Everything above, plus:
Open the resume in a PDF editor or Word, manually select each piece of PII, and delete or cover it with a black box. This takes 5-15 minutes per resume, is inconsistent across reviewers, and creates no audit trail. Not recommended for teams processing more than a handful of applications.
NullifyCV processes resumes entirely in your browser — no files are ever uploaded to any server. Here's how it works:
Processing time depends on your document and device. Because processing happens locally in your browser using pdf.js and mammoth.js, the tool is designed for local document processing — your candidates' data never leaves your device.
Try basic resume redaction with no account. The redaction workflow processes the resume on your device.
Redact a resume now →De-identifying resumes before internal distribution supports GDPR data minimisation principles under Article 5(1)(c). Whether your overall hiring process is fully GDPR compliant depends on many other factors — consult your Data Protection Officer for a formal assessment.
NullifyCV supports PDF and DOCX files. For PDFs with a text layer, black redaction bars are drawn directly onto the original file preserving layout. Scanned PDFs (image-only) should be exported as DOCX first.
Basic single-file redaction is free. Annual batch access (€49/year) supports unlimited processing with up to 200 resumes per batch, redaction settings, ZIP downloads and application-generated workflow logs.
Yes — the full source code is available on GitHub. You can audit every line that handles your documents.