Abstract: Mechanisms are provided to redact sensitive data from a payload. The mechanisms analyze data types in the payload, where the data types correspond to attributes of a person. The mechanisms score the data types as to their sensitivity, which is a measure of a probability that a corresponding data value of the data type, either alone or in combination with other data values, will uniquely identify the person. Each score, or an aggregation of the scores, is compared to a threshold. Responsive to a score, or the aggregation of the scores, being equal to or exceeding the threshold, the mechanisms redact data corresponding to data types whose scores, or the aggregation of scores, are associated. The redacted data is replaced a unique redacted identifier and a data type identifier that identifies at least one data type of the redacted data.