How to Redact an Insurance Claim Before You Share It

By the SladdPDF team · Published September 14, 2026 · Updated September 14, 2026

An auto, home, or health insurance claim file is one of the densest personal-data packages most people ever assemble: a policy number, a claim number, a driver's license or ID scan, a Social Security number, bank account and routing numbers for direct-deposit reimbursement, a vehicle identification number, and often a stranger's injury or repair estimate attached to your own name. Before you forward a claim packet to a contractor, an attorney, a body shop, a new insurer, or anyone who isn't the claims adjuster who needs the whole file, redact the fields they don't actually need. This guide covers what a claim file actually contains, what state insurance-privacy and data-security law says about it, and how to redact one before it leaves your hands.

What's inside a typical claim file

A single claim — auto, homeowners, or health — usually pulls together documents that were never designed to travel as one packet: the declarations page with your policy number, a First Notice of Loss form with your SSN and driver's license number, a repair or medical estimate, photos of the damage or injury, and a reimbursement form with a full bank account and routing number for direct deposit. A multi-vehicle accident claim adds other drivers' names, license numbers, and insurance information; a liability claim can add witness statements and, in an injury claim, a medical record's worth of protected health information.

What insurance privacy law actually covers

The National Association of Insurance Commissioners' Insurance Information and Privacy Protection Model Act (Model #670) is the template most state insurance-privacy statutes are built on. It governs how an insurer, agent, or insurance-support organization collects, uses, and discloses personal information gathered "in connection with an insurance transaction," and it explicitly covers information collected for claim investigation — including for detecting or preventing fraud, material misrepresentation, or material nondisclosure in a claim. States including Arizona, California, Connecticut, Georgia, Illinois, Maine, Massachusetts, and Nevada have adopted a version of it.

Model #670 gives consumers rights that matter directly to a claim file: notice of how information practices work, access to the personal information an insurer holds, the right to request correction of inaccurate information, and — if a claim or application is denied or an adverse underwriting decision is made — a written reason for it. None of those rights make a claim file public; they're about the relationship between you and your own insurer, not a license for a third party to hold onto a copy with every field intact.

The data-security duty on whoever handles the file

Separately, the NAIC's Insurance Data Security Model Law (Model #668), adopted in some form by dozens of states since 2017, imposes an affirmative security duty on insurers, agents, and other licensees over "nonpublic information" — a broader category than the personal information covered by Model #670, reaching business and transaction data whose exposure would cause a material adverse impact. A licensee that experiences a qualifying cybersecurity event generally must notify the state insurance commissioner within 72 hours of determining an event occurred.

Why claim files are a fraud target

Insurance fraud is estimated to cost the industry, and ultimately policyholders through higher premiums, $308.6 billion a year across every line of business, according to a 2022 study for the Coalition Against Insurance Fraud — with life insurance, Medicare, and workers' compensation among the largest categories. A claim file with an intact SSN, driver's license number, and bank routing number is close to a ready-made identity-theft or payment-diversion kit; the FTC's Consumer Sentinel Network logged 6.5 million consumer fraud and identity-theft reports in 2024 alone, and a leaked claim packet is exactly the kind of document that feeds those numbers.

What to redact before sharing a claim file

Health-related claim documents carry an extra layer worth checking against our guide to HIPAA redaction of protected health information, and an itemized medical bill attached to an injury claim is covered specifically in our guide to redacting an explanation of benefits or medical bill. A reimbursement form's bank details follow the same logic as the account and routing numbers in our bank statement redaction guide.

A black box doesn't meet a "cannot be recovered" bar

Claim forms are usually filled out digitally as PDFs with a live, searchable text layer, or scanned as flat images. Drawing a rectangle over an SSN or account number in a markup or annotation tool typically leaves the original text or image sitting underneath — often still selectable with copy-paste, or recoverable by deleting the annotation layer. Our explainer on why a black box is not redaction covers exactly what stays behind.

What actually works is deleting the underlying text and image objects, or rasterizing the page — flattening it into a fresh image with no text layer and nothing recoverable underneath the mark. That's the approach in our guide to rasterization as the gold standard of PDF redaction, and it's what SladdPDF's Secure mode applies automatically on export.

How to redact a claim file, step by step

A claim packet with your SSN, bank details, and driver's license number is exactly the kind of file that shouldn't go through an upload-based "free PDF redactor" — sending it to a third-party server before you've even redacted anything defeats the purpose. SladdPDF processes the file entirely on your own device with JavaScript and WebAssembly; nothing is sent anywhere, and it keeps working offline once the page has loaded.

1. Open the claim file at sladdpdf.com. Load the First Notice of Loss form, estimate, or reimbursement packet in your browser. The file never leaves your device.
2. Decide what the recipient actually needs. A body shop pricing a repair needs the damage estimate and VIN, not your SSN or bank routing number; a contractor needs the scope of loss, not another claimant's information.
3. Redact the SSN, full bank account and routing number, driver's license number, and any other party's personal information the recipient doesn't need. Check every page — a policy number, SSN, or account number often repeats in a header, footer, or attached form.
4. Export in Secure mode. Secure mode rasterizes each page to a flat image, destroying the text layer and any hidden objects underneath the redactions.
5. Remove the metadata. Enable metadata removal on export so author, title, and originating software are stripped before you send the file.
6. Verify before sending. Open the exported PDF and try to select and copy text over the redacted areas. If nothing is selectable, the redaction held.

This article is general guidance, not legal or insurance advice. If you need to determine your own obligations under a state's adopted version of the NAIC model acts, or you're unsure what a claim requires you to disclose, consult your insurer or counsel.