How to Redact Medical Records (and What Needs to Be Redacted)

Medical records get shared for insurance claims, legal cases, research and second opinions — often with people who don't need every identifying detail. Here's how to redact medical records properly, what typically needs to be removed, and how to do it without uploading sensitive health information anywhere.

This guide is general information, not legal advice. If you work for a healthcare provider, follow your organisation's privacy procedures.

What needs to be redacted in medical records

It depends on why you're sharing them:

• Sharing your own records (with an employer, insurer or lawyer): remove what the recipient doesn't need — often other people's details, unrelated conditions or visits, and ID numbers.
• Court filings: US federal courts limit Social Security and account numbers to the last four digits, birth dates to the year, and minors' names to initials (FRCP 5.2). Local rules may add more.
• De-identifying records (for research or publication): HIPAA's Safe Harbor method (45 CFR 164.514(b)(2)) lists 18 identifiers to remove. That standard applies to covered healthcare organisations, but it's a useful checklist for anyone.

HIPAA's 18 identifiers

1. Names
2. Geographic details smaller than a state — street address, city, county, ZIP code (the first three ZIP digits may stay in some cases)
3. All elements of dates except the year (birth, admission, discharge, death dates), and ages over 89
4. Telephone numbers
5. Fax numbers
6. Email addresses
7. Social Security numbers
8. Medical record numbers
9. Health plan beneficiary numbers
10. Account numbers
11. Certificate or license numbers
12. Vehicle identifiers and serial numbers, including license plates
13. Device identifiers and serial numbers
14. Web URLs
15. IP addresses
16. Biometric identifiers, such as fingerprints and voice prints
17. Full-face photographs and comparable images
18. Any other unique identifying number, characteristic or code

How to redact medical records without uploading them

Health information is among the most sensitive data there is, so avoid uploading it to online tools at all.

1. Open Redact PDF. It runs in your browser; the file never leaves your device.
2. Drop in the record. If you have several files, merge them first so you only redact once.
3. Drag boxes over each identifier, on every page — patient names and record numbers usually repeat in headers and footers.
4. Click Redact & Download. Each page is rebuilt with the boxes baked in, so the covered text is removed from the file, not just hidden.

Check the redaction worked

• Copy test: select all text in the redacted file and paste it into a note. No redacted details should appear.
• Search test: search for the patient's name or record number. Nothing should be found.
• Hidden data: run the file through the Privacy Risk Scanner. Exported records can carry the author, the software that created them, or attached files.

FAQ

Can I redact my own medical records? Yes. They're your records, and you decide what to share. Redact what the recipient doesn't need.

Is drawing a black box in a PDF editor enough? Usually not. A drawn shape covers the text, but the text is still in the file and can be copied out. Use a tool that removes the content, then run the copy test.

Do redacted medical records still count as protected health information? Not necessarily, but don't assume they're anonymous. Under HIPAA, records are only "de-identified" once all 18 identifiers are removed and there's no other reasonable way to identify the person.

Is it safe to use an online redaction tool for medical records? Uploading puts a copy on someone else's server. For a healthcare organisation, that generally needs a business associate agreement. Redacting in your browser avoids the upload entirely — see Is There a HIPAA Compliant PDF Editor?