How to redact a PDF properly (and when you need to)

What redaction means

Redacting a PDF means permanently removing information from the file, not just hiding it from view. After a correct redaction, the content is gone: it cannot be selected, copied, searched, or recovered by deleting the black mark.

That is different from covering text. A shape, highlight or black box placed over a sentence leaves the sentence in the document underneath, and anyone can copy it out. Many publicly embarrassing leaks of court filings and government reports came from exactly this mistake.

When you should redact a PDF

Redact whenever a document is going to someone who does not need every detail in it. Common cases include: - Legal filings and discovery, where personal identifiers and privileged material must be withheld. - Responses to records or data-access requests, where other people's information has to be removed. - Sharing invoices, bank statements or payslips as proof, where only one figure is relevant. - Sending contracts or reports to vendors, partners or the public. - Publishing documents online, where anything left in the file can be indexed and kept forever.

Privacy laws such as GDPR, and sector rules for health and financial data, generally expect organisations to share only the personal data that is necessary. Redaction is how you do that with a document that already exists.

What to look for before you share

Go through the document for: full names, signatures, home addresses, phone numbers and personal email addresses; dates of birth; national ID, passport, tax and social security numbers; bank account, card and IBAN numbers; medical, salary and disciplinary details; and anything confidential to a client or business.

Do not forget the places people miss: headers and footers, table cells, image captions, stamps, handwritten notes on scans, form field values, comments, and attachments embedded in the PDF.

How to redact a PDF, step by step

1. Work on a copy and keep the original somewhere safe. Redaction is permanent by design. 2. Open the copy in a PDF editor with a true redaction tool. 3. Use search to find every occurrence of a name or number rather than relying on your eyes; mark each result. 4. Mark images and signatures by drawing over them. 5. Review the marks, then apply the redaction. This is the step that removes the content. 6. Save the file under a new name, such as "Contract - redacted.pdf".

In Pandaedits on Mac and iPhone, the Redact tool works this way: you mark areas, apply, and the text, images and graphics under each mark are removed from the saved document.

How to check that the redaction worked

Close the redacted file and reopen it, then do three checks: 1. Search for each redacted word or number. Nothing should be found. 2. Select the area around a redaction, copy, and paste into a plain text editor. The removed text must not appear. 3. Check document properties, comments, bookmarks and attachments for the same information.

Only send the file once all three checks pass.

Redacting scanned PDFs

Scanned pages are images, often with an invisible OCR text layer added for search. Redaction must remove both: the pixels in the image and the hidden text in the same area. After redacting a scan, run the search check above; if the hidden layer still contains the words, they will turn up.

Common redaction mistakes

Using a highlighter set to black. Changing the text colour to white. Drawing a rectangle annotation. Cropping the page, which hides content but keeps it in the file. Redacting the visible page but leaving the same detail in the file name, metadata or an attachment. Each of these leaves the information recoverable.