Clients increasingly ask for anonymized CVs. Here is how to keep that from becoming an admin nightmare — and stay GDPR-compliant in the process.
A client messages on Thursday afternoon: “Can you send these three candidates anonymized? We want to assess on skills, not on names.” Reasonable request, good reason, small detail: you promised the shortlist by Friday morning. Now you have to open three CVs, strip out the names, remove the photos, take out the place of birth, double-check the dates, and hope you have not left initials or a street name somewhere that still leads back to the person.
In 2026, this is still the norm. A reasonable request from a client turns into an admin job nobody wants to do, and one slip achieves the opposite of what was intended. In this article we lay out why anonymized CVs are becoming a standard request, where manual anonymization keeps breaking, and how to set things up so you do it in seconds — without losing sight of the match itself.
Unconscious bias is no longer an abstract HR topic. Field research into hiring discrimination has been running for two decades across European labour markets, and the result is consistent: when CVs are otherwise identical, candidates with majority-culture surnames are demonstrably more likely to receive an interview invitation than candidates with non-western names. That is not opinion, it is measured. Several Dutch municipalities (Nijmegen, Den Bosch, Utrecht among them) have run anonymous-application pilots, and “blind hiring” has become a growing topic in the private sector as well.
This makes the request to recruiters more concrete. No longer “watch out for bias”, but: deliver CVs without name, photo, date of birth, place of birth, gender markers, and ideally without the dates that allow age inference. Some clients — healthcare providers, public sector organizations, large corporates with a diversity policy — make it standard procedure. Others ask for it project-by-project, often when it becomes politically or internally important.
On top of that sits the GDPR layer. A CV is by definition a document full of personal data, and sharing it with a client is a processing act under GDPR. In practice we see that agencies working with multiple clients increasingly receive the question to deliver anonymous profiles in the first round — not because the client only wants the real name later, but because it is legally and procedurally cleaner to consciously choose when to exchange personal data.
The direction is clear. Anonymous applications are no longer a niche. It is an expectation that will broaden over the coming years, and agencies still wrestling with it manually will hit a wall the moment the volume goes up.
At first glance, anonymizing a CV looks like a small task. Strip the name, delete the photo, mask the date of birth, done. In practice it is the same steps for every CV, with the same pitfalls, and it costs time every single time.
What needs to come out, at minimum:
At the same time, something has to remain. The match-relevant content — work experience, skills, certifications, sector experience, languages, availability — has to stay readable and well presented. A CV with so many fields stripped out that it looks like swiss cheese helps no one.
Then comes the second layer: house style. A professional agency does not deliver a raw Word export with “REDACTED” in black bars. The CV has to look identical to every other CV that agency sends to that client: same font, same layout, same agency logo. Otherwise the client sees in one glance that this is an exception, and that undermines the trust that the content is correct.
Together, manual anonymization quickly takes 10 to 20 minutes per CV. With a shortlist of five candidates, that is an hour. For a team sending ten shortlists per week, that is half a working day. And that is just lost time — the real risks sit elsewhere.
1. Anonymity leaks. The most common slip: you take the name out of the header, but forget the first name in a reference bullet halfway through (“Reporting to Max…”). Or the footer with initials. Or a project URL with the name embedded. One leak and the entire goal — bias-free assessment — is gone. And you do not notice until the client calls.
2. Content gets mangled. When you anonymize quickly, you accidentally drop things that are not identifying but are relevant: a client name in work experience, a specific certification that sat on the same line as the name, a date you remove “just to be safe”. The CV loses sharpness, and the match loses with it.
3. House style turns to noise. “Select and delete” creates layout gaps. Blank lines in the wrong place, headers landing on new pages, photo frames left empty. A hiring manager’s eye registers that in milliseconds, and the signal is: this agency does not work carefully. For a document that is supposed to project care — the first impression of a candidate — that is a costly mistake.
Fix one of these three and you have something better. Fix all three at once, without it costing you time, and anonymization stops being “the job I would rather not do” and becomes a checkbox in the workflow.
An AI system that already understands the structure of a CV can anonymize it in seconds — and does so in a fundamentally different way than manual cut-and-paste.
In a structured recruitment stack, a CV gets parsed on intake. AI CV parsing extracts every individual data point: name, contact details, photo, birth details, education, work experience, skills, certifications, languages. Every field sits in its own slot in the database, no longer as flat text inside a PDF.
That sounds technical, but the consequences are practical. Anonymizing now becomes: drop every personally identifying field, keep every match-relevant field, render the CV again in our house style. One button. The output is a fresh, clean document — not a mauled version of the original with black bars and empty photo frames.
At Simply this lives inside auto-formatting: every incoming CV is recognized, structured and re-rendered into the agency’s house style. The anonymous variant uses the same renderer, only with the “hide personal data” setting on. Same font, same section order, same logos — just without the identifying fields.
What that means for the risks above:
“GDPR-compliant” is sometimes used loosely, so let us be precise about what it means in this context.
First: an anonymized CV does not erase the GDPR processing. You still processed the CV — the original sits somewhere in your systems — and you are now sharing a derived version with a client. GDPR then asks of you:
On top of that, the EU AI Act adds specific requirements for AI systems in recruitment. Anonymization itself does not fall in the high-risk category — it is a data minimization step, not a decision-making step — but it does fit the broader principle that recruitment AI should contribute to fair assessment, not muddle it. An auditable anonymization process is exactly what you want to see in an Annex III-aligned workflow.
In practice: a well-set-up recruitment stack delivers not just the anonymous CV, but the proof that you did it correctly. And you need that proof the moment a client, a candidate or a regulator asks for it.
No rebuild. Three choices.
Anonymize at the source, not at export. A CV that is already structured in your system can be anonymized in seconds. A CV that only exists as a PDF in a mailbox cannot. Invest first in structured data extraction — anonymization then becomes a consequence, not a project.
Make it a setting, not an action. Recruiters should not have to choose “am I anonymizing today or not”. It should be a toggle on the CV export screen: “send anonymous to this client”. For clients with a standing anonymous-CV policy, you set it on by default.
Define what “anonymous” means per client. Not every client wants exactly the same things hidden. One wants only name and photo gone, another also wants birth years and first-job start dates removed, a third also wants nationality stripped. Set up a per-client profile and let the system apply it. Otherwise you still get pushback after delivery.
Do these three and anonymization stops being a bottleneck in your shortlist flow. It becomes a checkbox you tick before you hit send, and the output is consistent, GDPR-aligned and visually professional.
The win is not only time. It sits in four things, in order of impact.
Speed at peak moments. Thursday 4 PM, client asks for an anonymized shortlist by Friday 9 AM. With manual flow, that means working late. With automated anonymization, it means the shortlist is ready in five minutes and you go home on time.
Consistency in quality. No more difference between the anonymous CV the senior colleague delivers and the one the junior delivers. Both use the same profile, the same renderer, the same house style. For a client that means: I know what I’m getting.
Compliance without headaches. When the client or a DPO asks “can you show this was handled GDPR-compliant?” — yes, here is the log. When a candidate asks “what was shared about me?” — yes, here is the exact version. No after-the-fact reconstruction.
Stronger positioning with diversity-policy clients. Agencies that offer anonymous CV delivery as standard, rather than as an exception, stand out with large employers and public organizations. That is a commercial argument, not just an admin argument.
CV anonymization does not stand alone. It is a layer on top of something you want to have in good shape anyway: structured, validated, reusable candidate data. If that foundation is solid, you get anonymization almost for free. If that foundation is missing, every anonymization remains a manual job.
In the broader stack, this connects to:
The full picture — how conversation data, CV data and CRM data come together into one workable file — is laid out in our pillar guide: from conversation to CRM, how AI is changing recruitment intelligence.
About the author
Remo Vloet is a co-founder of Simply, the AI Operating System for recruitment agencies: inbox, meetings, sourcing, CV parsing, search and matching, documents and automation in one system. With a background in building complex software, he contributes to the technical vision behind Simply.
LinkedInArticles by Remo VloetAn anonymized CV is a version of the original CV with all personally identifying information stripped: name, photo, date of birth, contact details, gender markers, and anything directly traceable to the individual candidate. What remains is the match-relevant content: work experience, skills, certifications and languages. The goal is that the client assesses on fit, not on identity.
To limit bias in the first round of selection. Field research has shown for years that candidates with non-majority surnames or clearly identifying markers are invited for interviews less often, even with identical qualifications. Anonymous CV delivery forces the first assessment to happen on content. For organizations with a diversity policy, and for public sector bodies such as municipalities, this is increasingly standard procedure.
Realistically, 10 to 20 minutes per CV when done carefully: removing names everywhere, deleting the photo, masking birth and contact details, checking that the house style is not broken. With a shortlist of five candidates you spend an hour, and the risk remains that you missed initials or a reference somewhere.
If the system works on structured data and keeps an audit trail, yes. GDPR requires purpose limitation, data minimization, and the ability to demonstrate what was shared. An automated process that logs per export which fields were sent, to which client, and at which moment, meets those requirements better than a manual Word edit that cannot be reproduced.
Yes. Anonymization hides personal data, not domain content. An IT CV keeps its technical stack, a healthcare CV its certifications, a contractor their sector experience. The match-relevant data stays fully readable — only the identity of the person behind it is shielded.
A QBR (Quarterly Business Review) is the quarterly review with your client. How to run one that retains and grows the account, and why data quality decides it.
Remo Vloet9 min.
In recruitment, ICP means two things: Ideal Customer Profile and Ideal Candidate Profile. Here is how to build both, and why data quality makes the difference.
Remo Vloet9 min.
AI screening tools read and rank candidates in minutes. Here is how the main types work, where bias and compliance risk creep in, and how to choose one.
Remo Vloet9 min.
Find out how Simply can completely evolve your workflow.No slides, just product.