Redacting Exhibits Without Leaks: A Personal Identifier Workflow

Most redaction failures are not judgment errors. Someone knew the account number had to go, drew a black rectangle over it, and filed the PDF. Anyone who copied and pasted that page, or ran a text search, could read the number underneath. The same file, with a properly removed number and a quick verification step, would have been fine.

This guide sets out a redaction workflow for exhibits and filings: what Federal Rule of Civil Procedure 5.2 requires, the identifiers that hide in message logs, photos and metadata, why PDF redactions fail, how to redact and verify correctly, and how to keep a redaction log that stands up. Rule 5.2 governs federal civil cases; state courts and family courts have their own privacy rules, and many go further.

What does Rule 5.2 require you to redact?

In federal civil filings, Rule 5.2(a) limits four categories of information unless the court orders otherwise. A filing that contains them may include only:

• The last four digits of a Social Security number or taxpayer-identification number
• The year of an individual’s birth
• A minor’s initials
• The last four digits of a financial account number

The rest of the rule matters too:

• Exemptions, 5.2(b). Certain filings are exempt, such as some records of administrative or state court proceedings and a financial account number identifying property allegedly subject to forfeiture. Read the list before assuming an exemption applies.
• Sealing and protective orders, 5.2(d) and (e). The court may order filing under seal, and for good cause may require further redaction or limit remote access.
• Unredacted copy under seal, 5.2(f). A party may file an unredacted copy under seal, which the court retains as part of the record.
• Reference list, 5.2(g). A sealed list may identify each redacted item with a unique identifier for use in the public filing.
• Waiver, 5.2(h). A person waives the protection for their own information by filing it without redaction and not under seal.

Criminal filings follow the parallel Federal Rule of Criminal Procedure 49.1, which also addresses home addresses. Many state rules add categories such as driver’s license numbers, full dates of birth, and medical or juvenile information, and some family courts restrict children’s names and records more broadly. Check the rules that govern your court before relying on the federal list.

Filing redactions are not discovery redactions

Rule 5.2 governs what goes on the public docket. Discovery productions are a different setting: the receiving party may be entitled to information that cannot appear in a public filing, and protective orders, not Rule 5.2, usually control how it is handled. Keep the two decisions separate. A document may be produced with only privilege redactions under a protective order, then redacted further under Rule 5.2 before it is filed as an exhibit.

Which personal identifiers hide in exhibits?

More than a page-by-page skim will catch. Each exhibit type has its own blind spots:

Not every identifier must be removed. The rule, the court’s orders and any protective order decide what is redacted, and some details stay because they are relevant. The point is to find them all so the attorney can decide deliberately.

Why do PDF redactions fail?

Because covering text is not the same as removing it. A PDF can hold several layers of information, and a visual box addresses only one. Common failure points:

• Shapes and annotations drawn over text leave the text in the file. Copy, paste or search reveals it.
• Black highlighting behaves the same way.
• Scanned pages with an OCR text layer. The image is blacked out, but the invisible text layer beneath still contains the words.
• Document properties and metadata. Author, title, comments, and earlier versions retained by incremental saves.
• Hidden content. Bookmarks, form fields, embedded attachments, hidden layers and file names that repeat the protected information.
• Images where a box was placed in a separate layer rather than flattened into the image.

How do you redact exhibits correctly?

Preserve the original, redact a copy with a true redaction tool, remove hidden data, and verify before anything leaves the firm. A workflow that holds up:

1. Preserve the original. The unredacted source stays untouched. Evidence Helper, for example, preserves originals untouched with a SHA-256 hash recorded on arrival, so every redacted version is clearly a derivative of a known source.
2. Make a working copy. Name it to show its status, such as P-014_REDACTED_v1.pdf.
3. Find candidates by search and by eye. Search for patterns (nine-digit numbers, dates, “acct,” “DOB,” children’s names), then review visually for what search misses, such as numbers inside images.
4. Apply true redaction. Use a tool that removes the underlying content, not one that draws over it. Use a consistent label such as “REDACTED – PII” so the court sees why the gap exists.
5. Remove hidden data. Run the tool’s hidden-information or sanitize function to clear metadata, comments, bookmarks, attachments and form fields.
6. Verify. Search for each redacted value, select and copy text over each redaction, check document properties, and open the file in a second viewer.
7. Second-person QC. Someone who did not do the redaction checks a sample, and every page of high-risk exhibits.
8. Log it. Record each redaction and its basis.

How should a redaction log work?

A redaction log records what was removed, from where, and why, so the team can answer questions from the court or opposing counsel without reopening every file.

Two related conventions keep the record coherent:

• Privilege redactions are a separate category. Material withheld as privileged must be described under Rule 26(b)(5)(A) in a way that lets others assess the claim, typically on a privilege log. The privilege log guide covers the format.
• Keep Bates numbers stable. A redacted page should carry the same Bates number as its unredacted counterpart, so both sides can refer to the same page. The Bates numbering guide explains why.

How do you redact photos, video and metadata?

Images and media need the same discipline with different tools. The principle is identical: remove the information from the file, then verify.

• Photos: obscure the identifier in an image editor, flatten and export a new file, and confirm the exported file contains no layers. Then check and clear any location metadata as appropriate.
• Metadata: GPS coordinates, device names and owner fields can identify a person or place. The photo metadata guide explains what each field reveals and how to document any fields removed from a produced copy.
• Video: redaction usually means blurring or masking across frames; audio redaction means muting or tone-replacing segments. Keep a log of time ranges redacted.
• Screenshots: crop out notification banners and unrelated apps from a copy, and note on the log that the crop was a redaction, not an edit of substance.

What redaction mistakes come up most?

The failures that recur across firms:

• Boxes drawn over text instead of true redaction
• OCR text layers left under blacked-out scans
• Redacting the exhibit but not the same number quoted in the motion or declaration
• Redacting the PDF but filing the native spreadsheet unredacted
• Inconsistent redactions of the same value across exhibits, which can reveal it by comparison
• Overwriting the original with the redacted version
• No log, so nobody can say later what was removed or why

What must be redacted, and whether to seek a protective order or sealing, are decisions for the attorney responsible for the matter under the rules of the court where it is pending. This is general information, not legal advice. A consistent workflow makes sure those decisions are carried out completely, every time.