How to Redact Documents: Black-Box Errors, Metadata, and Filing

To redact legal documents properly, you need to know which identifiers the governing rule requires you to hide, use software that permanently deletes the underlying text instead of just covering it, strip the file’s metadata, and verify the result before it leaves your desk. A black rectangle laid over text in a PDF is not a redaction. Federal Rule of Civil Procedure 5.2 and its criminal counterpart set the baseline for what must be removed from court filings, and the burden of getting it right falls entirely on the filer.

What Has to Be Removed

Rule 5.2 of the Federal Rules of Civil Procedure identifies five categories of personal information that must be truncated in any electronic or paper filing. A filer may include only the last four digits of a Social Security number or taxpayer identification number, only the year of an individual’s birth, only a minor’s initials, and only the last four digits of a financial account number.1Office of the Law Revision Counsel. Federal Rules of Civil Procedure Rule 5.2 – Privacy Protection For Filings Made with the Court The rule applies to every filing, whether submitted by an attorney, a self-represented party, or a nonparty responding to a subpoena.

Federal criminal filings follow Rule 49.1, which covers the same identifiers and adds one more. In a criminal case, an individual’s home address must be reduced to city and state only.2Office of the Law Revision Counsel. Federal Rules of Criminal Procedure Rule 49.1 – Privacy Protection For Filings Made with the Court Courts can order further protection when a party’s safety is at risk, and state address confidentiality programs can substitute a mailing address so a survivor’s actual location never appears on the docket.

Some filings are exempt from the standard truncation requirements. Rule 5.2 lists records from administrative or agency proceedings, official state court records, records from other courts that were not subject to redaction when originally filed, self-represented federal habeas filings, and financial account numbers that identify the property in a forfeiture proceeding.3Legal Information Institute. Federal Rules of Civil Procedure Rule 5.2 – Privacy Protection For Filings Made with the Court

These court rules govern documents filed with a court. Different regimes control other contexts: HIPAA governs protected health information held by covered entities, FOIA’s nine statutory exemptions govern what federal agencies may withhold from records they release,4Office of the Law Revision Counsel. 5 USC 552 – Public Information; Agency Rules, Opinions, Orders, Records, and Proceedings and protective orders in business litigation govern trade secrets and proprietary data produced during discovery. If your redaction task falls under one of those regimes, its rules apply on top of, or instead of, the court filing rule.

The Black-Box Problem

The most common and most damaging misconception about redaction is that drawing a black box over text removes it. It does not. In a standard PDF or word-processing file, a black rectangle sitting on top of text is a visual layer. The underlying text stays embedded in the file. Anyone can extract it by selecting and copying, by editing the file’s code, or by manipulating layers in image-editing software. High-profile filings have been embarrassed when supposedly redacted passages came out of a court document through nothing more than copy and paste.

Proper redaction requires software that permanently deletes the underlying text and replaces it with a block that contains no recoverable data. Professional tools like Adobe Acrobat Pro use a two-step process. First, you mark the content for redaction. At that stage the markings are visual indicators and the original text is still in the file. Second, you apply the redactions, which permanently destroys the marked content. Skipping that second step is one of the most frequent mistakes. The document looks redacted on screen while the data sits intact underneath.

Many professional tools include a search-and-redact feature that scans a document for patterns such as Social Security numbers and phone numbers, or for specific names. On a filing that runs hundreds of pages, an automated scan catches recurring identifiers a manual pass would miss. Automated tools are not infallible, though. They work from patterns and keyword lists, so unusual formatting or a misspelled name can slip past. A manual review after the automated pass is still necessary.

Metadata and Hidden Layers

Even after the visible text is gone, a document can still leak information through its metadata. Every electronic file carries hidden properties: the author’s name, creation and modification dates, tracked changes and revision history, comments, internal file paths showing where the document was stored, and editing duration. A PDF that has been through multiple drafts can contain earlier versions of the text embedded in its structure. Redacting the visible page without cleaning the metadata leaves a trail that anyone examining the file’s properties can follow.

After applying redactions, use your software’s sanitization feature to strip metadata before saving the final version. In Adobe Acrobat Pro, the tool prompts you to sanitize and remove hidden information as part of the redaction workflow. Flattening the document, which merges all layers into a single image, adds another safeguard against layer manipulation. Work on a duplicate, not the original. Once redactions are applied and the file is sanitized, the removed data is gone permanently.

Redacting for Privilege in Discovery

Redaction during discovery works differently from redaction for the public record. When producing documents to an opposing party, you may need to redact passages protected by attorney-client privilege or the work-product doctrine while producing the rest of the document. Federal Rule of Civil Procedure 26(b)(5)(A) requires that when a party withholds or redacts on privilege grounds, the party must describe the nature of the withheld material in enough detail for the other side to evaluate the claim, without revealing the privileged content itself.5Legal Information Institute. Federal Rules of Civil Procedure Rule 26 – Duty to Disclose; General Provisions Governing Discovery

In practice, that means a privilege log. The log lists each redacted document or passage, identifies who created it and when, describes the subject matter in general terms, and states which privilege applies. Vague logs invite a motion to compel. If opposing counsel challenges a redaction, the court can conduct an in camera review, examining the unredacted material privately to decide whether the privilege was properly claimed.

Filing a Redacted Document

When the court needs to see the unredacted version, Rule 5.2 provides two paths. A court can order the filing made under seal with no redactions, preserving access for the judge while keeping it off the public docket. Alternatively, a party filing a redacted version for the public record can simultaneously file an unredacted copy under seal, and the court keeps the unredacted copy as part of the record.1Office of the Law Revision Counsel. Federal Rules of Civil Procedure Rule 5.2 – Privacy Protection For Filings Made with the Court

A waiver provision catches many filers off guard. If you file a document containing your own unredacted personal information and you do not file it under seal, you waive your Rule 5.2 privacy protection for that information.3Legal Information Institute. Federal Rules of Civil Procedure Rule 5.2 – Privacy Protection For Filings Made with the Court The same waiver applies in criminal cases under Rule 49.1.2Office of the Law Revision Counsel. Federal Rules of Criminal Procedure Rule 49.1 – Privacy Protection For Filings Made with the Court The waiver covers only your own information, not anyone else’s, but once your full Social Security number sits on the public docket because you put it there, the court has no obligation to pull it back.

Court clerks do not check filings for compliance with the redaction rules. The rules place that burden on the party or attorney making the filing.3Legal Information Institute. Federal Rules of Civil Procedure Rule 5.2 – Privacy Protection For Filings Made with the Court Submit a document with a full Social Security number visible and the clerk will accept and docket it. The error becomes part of the public record until someone catches it and asks the court for relief. The advisory committee notes to Rule 5.2 indicate that a person who mistakenly files unredacted information may seek relief and the court can restrict remote electronic access to the document, but no mechanism guarantees the information was not accessed and downloaded first. For attorneys, exposure runs beyond court-imposed sanctions to disciplinary complaints and malpractice liability.

Before submission, open the final file fresh. Try to select and copy the redacted areas. Confirm no hidden text comes through. Check the document properties to confirm the metadata is clean. Sixty seconds of verification is cheap compared with the alternative.