What Needs to Be Redacted in Legal Documents?

Before you file anything in federal court, you need to remove five specific pieces of personal information: Social Security and taxpayer identification numbers, full dates of birth, the names of any minors, and financial account numbers. Criminal filings add a sixth category, home addresses. That’s the legal floor for what needs to be redacted in legal documents filed in federal court, and the responsibility to get it right sits with the filer, not the clerk. Beyond those mandatory items, careful practice extends to medical information, driver’s license and passport numbers, trade secrets, privileged communications, and the hidden metadata inside your digital files.

The Five Mandatory Categories in Federal Court

Federal Rule of Civil Procedure 5.2 governs civil filings and Federal Rule of Criminal Procedure 49.1 governs criminal ones. Neither rule tells you to strip the identifiers entirely. Each tells you precisely how much of the number or name can remain visible.¹²

Social Security numbers and taxpayer identification numbers: show only the last four digits.
Dates of birth: show the year only. The month and day come out.
Names of minor children: replace the full name with initials.
Financial account numbers: show only the last four digits. This covers bank accounts, credit cards, investment accounts, and similar identifiers.
Home addresses (criminal cases only): show the city and state only, not the full street address.

In a civil case, the federal rules do not technically require redacting a home address, though doing it anyway is sensible when the filing will be publicly accessible on PACER. Both rules state plainly that the clerk has no duty to review filings for compliance. If you miss something, that’s on you.¹ Most state courts have adopted parallel requirements, so these categories are the baseline rather than the complete picture.

Sensitive Information the Rules Don’t Cover

The mandatory list is deliberately narrow. The committee notes to Rule 5.2 flag driver’s license numbers and alien registration numbers as examples the rule leaves out.¹ Passport numbers, medical record numbers, and biometric data sit in the same gap. None are required to be redacted by default, but all can cause real harm if they land on a public docket.

Medical records show up constantly in personal injury, disability, family law, and workers’ compensation cases. Federal privacy regulations control when a healthcare provider can disclose protected health information in a judicial proceeding, generally requiring a court order or satisfactory assurance that the patient had notice and a chance to object.³ Once the records enter the litigation, the filer decides what reaches the public record.

When a document contains sensitive identifiers outside the five standard categories, Rule 5.2(e) gives the court authority to order additional redaction or limit remote electronic access for good cause.¹ The practical move: file a motion asking the court to order the extra redaction or to permit filing under seal.

Trade Secrets and Privileged Communications

Discovery routinely pulls private business information into the open. Pricing strategies, customer lists, manufacturing processes, internal financials. If any of it reaches a public filing unredacted, the damage is immediate and rarely reversible.

The main tool for protecting confidential business information in litigation is a protective order. Federal Rule of Civil Procedure 26(c) allows a court to order that trade secrets or other confidential commercial information not be disclosed, or be disclosed only in a restricted way. Any document covered by a protective order that later needs to go to the court should either be filed under seal or have the protected portions redacted.

Attorney-client communications demand the same care. The privilege protects confidential discussions between a lawyer and client about legal advice and strategy.⁴ Email chains are the classic trap: a privileged legal paragraph sitting in the middle of an otherwise routine business thread. Miss it when producing documents, and you may have waived the privilege.

How to Actually Redact a Digital Document

Most redaction failures happen at this step, and the common thread is always the same. The filer covers text visually without removing it from the file. Drawing a black box with a markup tool, using a black highlighter, or changing the font color to match the background all look right on screen while leaving the underlying text fully selectable. Anyone can defeat that kind of “redaction” with copy and paste. High-profile filings have exposed sealed material this way, including a 2019 Paul Manafort filing where black rectangles drawn over the text left the data intact underneath.

Proper digital redaction uses a tool that permanently strips the selected content from the document’s code. Adobe Acrobat Pro has a dedicated redaction tool, separate from its markup tools, that replaces the targeted text with a black bar and deletes the original data from the file when you save. Other professional redaction tools work the same way. The distinction to watch for is between annotation tools, which layer an image on top of text, and redaction tools, which destroy the text. If your software does not explicitly label a feature as “redaction,” assume it is not actually removing anything.

For paper, the sequence matters. Mark through the text with a heavy permanent marker, then photocopy the page. File the photocopy, not the original. Copying flattens the image and eliminates any readable traces the marker left behind. Keep the unredacted original somewhere secure.

Metadata Is the Risk Most Filers Miss

A perfectly redacted document can still leak through its metadata. Metadata is the invisible data inside every digital file: author name, creation and modification dates, revision history, tracked changes, comments, and sometimes the text of previous drafts. A federal court’s e-filing guidance warns that previous revisions and deleted text may be recoverable by manipulating a PDF, and that filers must make sure documents are completely free of hidden data that could contain redacted information.⁵

In Word, the Document Inspector scans for and removes comments, revision history, and author information. In Adobe Acrobat, the “Remove Hidden Information” tool does the same job. A simpler fallback is to print to PDF, which generates a new flat file with the content baked into a single layer and strips most embedded metadata. Whichever method you use, check the file properties of your final document before filing. If you can still see an author name, creation date, or comment count, the metadata is still there.

When the Redaction Rules Don’t Apply

Both federal rules carve out specific categories of filings where the standard redaction requirements don’t apply.¹²

Records of administrative or agency proceedings.
Official records of state court proceedings.
Court or tribunal records that were not subject to any redaction requirement when originally filed.
Forfeiture proceedings, where the financial account number or property address identifying the property is the point of the filing.
Pro se filings in habeas actions under 28 U.S.C. §§ 2241, 2254, or 2255.
In criminal cases, arrest warrants, search warrants, charging documents, and supporting affidavits.

An exemption from the mandatory rule is not a green light to broadcast the information. The court retains authority to order additional protections for any filing.

Filing Unredacted Can Waive Your Protection

If you file a document containing your own personal identifiers without redacting them and without filing under seal, you have waived the protection of the rule as to that information. The waiver covers your own information only, not anyone else’s identifiers in the same document.¹

If the exposure was accidental, you can seek relief. The rule gives the court authority to order a redacted version filed for the public record or to restrict access to the original. Contact the clerk’s office immediately. Some courts will temporarily restrict public access to the document while you prepare a corrective filing; the District of Maryland, for example, can reset a document link so it is accessible only to court staff until the issue is resolved.⁶ Every minute the unredacted document sits on a public docket raises the chance someone downloads a copy.

The Reference List Option

When other parties or the court need the full identifiers, the rules offer a workaround. A filer may submit a sealed reference list alongside the redacted public filing. The list maps each redacted item to a unique identifier, so anyone authorized to view the sealed list can connect the partial numbers in the public document to the complete information.¹ The reference list stays under seal and can be amended as needed. Any reference in the case to one of the listed identifiers is treated as a reference to the full corresponding information, so you comply with the redaction rules without forcing the court and opposing counsel to work from incomplete data.

1
Cornell Law School. Federal Rules of Civil Procedure Rule 5.2 – Privacy Protection For Filings Made with the Court
2
Cornell Law School. Federal Rules of Criminal Procedure Rule 49.1 – Privacy Protection For Filings Made with the Court
3
eCFR. 45 CFR 164.512 – Uses and Disclosures For Which an Authorization or Opportunity to Agree or Object Is Not Required
4
Cornell Law School. Federal Rules of Evidence Rule 502 – Attorney-Client Privilege and Work Product Limitations on Waiver
5
United States District Court District of New Jersey. Personal-Identity and Metadata Redaction Techniques for E-Filing
6
United States District Court District of Maryland. Documents Filed in Error