To redact documents properly, you have to delete the sensitive text from the file itself, not just hide it. That means using software with a real redaction tool for digital files, opaque markers plus a photocopy for paper, and a separate metadata cleanup pass for anything electronic. A black box drawn over text in a PDF is not redaction, and treating it as such is how Social Security numbers, settlement figures, and confidential strategy have ended up on the public record.
Redacting a Digital Document
The single most important thing to understand about digital redaction is that placing a black box over text does not redact it. A black rectangle drawn with a standard annotation or drawing tool is a cosmetic layer sitting on top of the text. Anyone can select the text underneath, copy it, and paste it into another document.
Proper digital redaction requires software with a dedicated redaction function that deletes the underlying text from the file’s code. Adobe Acrobat Pro has a specific “Redact a PDF” workflow: you mark the text or image for redaction, then apply the redactions, at which point the software asks whether you also want to sanitize the document by removing hidden information.1Adobe Help Center. Redact Sensitive Content in Acrobat Pro
That “apply” step is where the redaction actually happens. Until you click it, you’ve only marked areas for future removal. If you save and share the file before applying, every marked passage remains in the document. Other professional PDF editors like Foxit and PDFelement offer similar dedicated redaction tools, and many now include pattern-recognition features that automatically flag Social Security numbers, dates, and other common identifiers across a batch of documents.
One rule applies no matter what tool you use: never share a Word document or other editable-format file when the goal is redaction. Convert to PDF first, then redact and sanitize the PDF. Word’s revision history and tracked changes can reconstruct passages you removed months ago.
Redacting a Paper Document
Paper redaction is more straightforward but has its own failure modes. Use a fully opaque marker or specialized redaction tape to cover the sensitive text. Semi-translucent highlighters, thin markers, and regular office tape will not block a scanner or a strong backlight from revealing what’s underneath.
After marking the original, photocopy or scan the page. The copy becomes your filing or distribution version. This step matters because original marker lines, especially on thin paper, can often be read by holding the page up to light or by scanning at high contrast. The photocopy flattens everything into a single layer, making the redaction permanent on that version.
Store or destroy the marked original according to your document retention requirements. The photocopy is the only version that should enter the public record or leave your possession.
Removing Hidden Data From the File
A document contains more data than what’s visible on the page. Metadata embedded in the file can include the author’s name, revision history, tracked changes, comments, creation and modification dates, and text from earlier drafts that was deleted before the final version. You can perfectly redact every Social Security number on the page and still expose confidential information through metadata.
Documents scanned with optical character recognition present an additional risk. The OCR process creates a hidden text layer behind the scanned image, and that text layer persists even if you redact the visible image. A reader whose PDF viewer accesses the text layer directly can read right through what looks like a blacked-out scan.
Most professional PDF editors include a “Remove Hidden Information” or “Sanitize Document” function. In Adobe Acrobat Pro, the redaction workflow prompts you to sanitize during the apply step.1Adobe Help Center. Redact Sensitive Content in Acrobat Pro If your software doesn’t offer this, run the sanitization tool separately before sharing the file.
Verifying Your Redactions Before Sharing
After applying redactions, open the resulting file in a different PDF viewer and try selecting the redacted areas. If you can highlight or copy any text from a blacked-out region, the redaction failed and you need to start over with the right tool.
Check the document properties and metadata panel as well. The author field, title, and any custom properties often retain information from the original file. If the version shown reflects an earlier draft or lists a client name you didn’t intend to publish, sanitize again.
What Federal Court Rules Require You to Redact
Federal Rule of Civil Procedure 5.2 governs what personal information can appear in court filings. Any document filed electronically or on paper that contains certain identifiers must be redacted before it goes on the public record. The rule covers four categories:
- Social Security and taxpayer identification numbers, which may show only the last four digits.
- Dates of birth, which may show only the year.
- Financial account numbers, which may show only the last four digits.
- Names of minors, which must be replaced with the child’s initials.
These restrictions apply to every party and nonparty who files a document with the court.2Legal Information Institute. Federal Rules of Civil Procedure Rule 5.2 – Privacy Protection For Filings Made with the Court
Criminal cases add a fifth category: home addresses. Under Federal Rule of Criminal Procedure 49.1, a filing that includes someone’s home address may show only the city and state.3Justia Law. Federal Rules of Criminal Procedure Rule 49.1 – Privacy Protection For Filings Made with the Court
The court clerk is not required to check your filings for compliance. The responsibility to redact falls entirely on you or your attorney. If sensitive data slips through, the court won’t catch it for you. And if you file a document containing your own personal information unredacted and without requesting a seal, you’ve waived the rule’s protection for that information.2Legal Information Institute. Federal Rules of Civil Procedure Rule 5.2 – Privacy Protection For Filings Made with the Court
A few categories of filings are exempt, including records from administrative or agency proceedings, official state-court records, and pro se filings in habeas corpus actions under 28 U.S.C. ยงยง 2241, 2254, or 2255. Social Security benefit appeals and immigration cases have separate access rules under which the general public can view only docket entries and court opinions remotely.2Legal Information Institute. Federal Rules of Civil Procedure Rule 5.2 – Privacy Protection For Filings Made with the Court
Filing a Redacted Version Alongside the Original
When a court filing contains protected information, you typically prepare two versions: a redacted version for the public record and an unredacted version filed under seal. Federal Rule of Civil Procedure 5.2(f) gives filers this option explicitly, and the court retains the unredacted copy as part of the record.2Legal Information Institute. Federal Rules of Civil Procedure Rule 5.2 – Privacy Protection For Filings Made with the Court
Rule 5.2(g) offers an alternative: a reference list. This is a separate document, filed under seal, that pairs each redacted item with a unique identifier. Anywhere the identifier appears in the case, the court treats it as referring to the full unredacted information. The reference list is simpler when many documents in a case point to the same protected data, because you update the list once rather than maintaining sealed versions of every filing.2Legal Information Institute. Federal Rules of Civil Procedure Rule 5.2 – Privacy Protection For Filings Made with the Court
Local court rules add their own formatting requirements. Some courts require a “REDACTED” label on every page of the public version or specific filing procedures for the sealed copy. Check your court’s local rules before filing. Procedural noncompliance can get your documents rejected by the clerk even when the redaction itself is correct.
Redaction Failures That Have Exposed Real Data
The most common failure is the black-box overlay in a PDF. In the Paul Manafort prosecution in 2019, defense attorneys filed court documents with what appeared to be proper redactions, but the underlying text remained intact. Reporters copied the blacked-out passages and published them, revealing that Manafort had shared presidential campaign polling data with a Russian associate and discussed a Ukraine peace plan. A 2008 audit of the federal PACER system found roughly 1,600 cases where litigants filed documents with unredacted Social Security numbers, and many instances where the “redaction” was simply a black graphic placed on top of the text.
Word processing metadata has caused similar problems. In 2006, a U.S. Justice Department brief contained electronically redacted excerpts that became readable after someone pasted them into a Word document. In the Apple v. Samsung patent case in 2011, a judge’s opinion included redacted passages about Apple’s customer research and licensing deals that could be revealed with the same copy-and-paste technique.
Every one of these failures was defeated by a reader who selected text, pressed Ctrl+C, and pasted it somewhere else. If your redaction tool doesn’t delete the underlying data from the file, you haven’t redacted anything.
What Happens When Redaction Goes Wrong
Courts can order you to refile a noncompliant document, and judges have authority to impose sanctions for redaction failures. The federal rules don’t specify dollar amounts, but the costs of corrective action add up: refiling fees, attorney time to prepare compliant versions, and administrative costs. A court can also issue a protective order requiring redaction of additional information beyond the standard categories if circumstances warrant.2Legal Information Institute. Federal Rules of Civil Procedure Rule 5.2 – Privacy Protection For Filings Made with the Court
For attorneys, the stakes go beyond a single filing. The ABA’s Model Rules of Professional Conduct impose a duty of technological competence under Rule 1.1, requiring lawyers to understand the risks associated with the technology they use. Attorneys have received public reprimands for redaction failures in bankruptcy filings and federal student loan collection cases.
The practical consequence for the person whose data is exposed is often worse than the legal consequence for the filer. An unredacted Social Security number sitting in a publicly searchable court database is a permanent identity theft risk. Unlike a corporate data breach, where a company can offer credit monitoring, a court filing is a public record. Getting it removed or corrected after the fact is slow and sometimes impossible.