PDF Redaction for Lawyers: Confidentiality in Practice

By the SladdPDF team · Published August 23, 2026 · Updated August 23, 2026

Redaction for lawyers is a confidentiality control, not a formatting step: a black rectangle drawn over text in a PDF hides nothing if the text layer survives underneath it. ABA Model Rule 1.6(c) requires a lawyer to make reasonable efforts to prevent inadvertent disclosure of information relating to a client's representation, and Comment 8 to Model Rule 1.1 folds the benefits and risks of relevant technology into the duty of competence. In practice that means removing content rather than covering it, verifying the exported file before it leaves your office, and knowing exactly whose servers the client's documents touch on the way.

Why is redaction for lawyers a professional duty, not a formatting task?

Redaction is where the duty of confidentiality meets file formats, and both halves are enforceable. Model Rule 1.6 protects information relating to the representation of a client, and paragraph (c) adds an affirmative security obligation: "A lawyer shall make reasonable efforts to prevent the inadvertent or unauthorized disclosure of, or unauthorized access to, information relating to the representation of a client." A failed redaction is the textbook inadvertent disclosure — the words are in the document you deliberately published.

The comment to Rule 1.6 sets out how "reasonable" is judged, and the factors read like a redaction risk assessment: the sensitivity of the information, the likelihood of disclosure if additional safeguards are not employed, the cost and difficulty of those safeguards, and whether they would get in the way of representing the client. The same comment contains the safe harbor: an inadvertent disclosure is not a violation of paragraph (c) if the lawyer made reasonable efforts to prevent it. That is a strong argument for having a written redaction procedure — the procedure is the evidence of the effort.

The second duty is competence. In 2012 the ABA amended Comment 8 to Model Rule 1.1 so that keeping abreast of changes in the law and its practice expressly includes "the benefits and risks associated with relevant technology." The large majority of US states have since written that language into their own rules of professional conduct. Applied to redaction, it is not an abstract obligation: it means you are expected to know that a PDF has a text layer under the graphics, that annotations and highlights are separate objects from the page content, and that a document carries metadata your reader can open in two clicks.

How do redaction failures actually happen in filings?

The dominant failure mode is a black box drawn over an intact text layer, and the most-cited example is a court filing prepared by lawyers. On January 8, 2019, Paul Manafort's defense team filed a response to the Special Counsel's office in which the black bars sat on top of live text; reporters selected the covered passages, pasted them out, and published what the filing was meant to conceal — including that Manafort had shared 2016 Trump campaign polling data with an associate the FBI linked to Russian intelligence. The redaction looked correct on screen. It was never flattened.

It is not a one-off. In February 2009 the Associated Press read the blacked-out portions of electronic filings in the Facebook–ConnectU litigation and reported the confidential settlement figure the parties had fought to seal. And in October 2020, when Ghislaine Maxwell's deposition was released, the black bars themselves held — but the transcript shipped with the stenographer's alphabetized word index at the back, listing every word in the document with page and line references. Journalists at Slate used the index as a key and reconstructed the names behind the redactions within a day.

Note who is on that list: elite defense counsel, federal courts, a national wire service. This is a workflow problem, not a competence-of-individuals problem, which is exactly why the answer is a procedure rather than more care. For more cases and how each was cracked, see our roundup of famous redaction failures.

What do court rules require you to redact before filing?

In federal civil practice the baseline is Federal Rule of Civil Procedure 5.2, which limits what personal identifiers may appear in a public filing. Unless the court orders otherwise or an exception applies, a filing may include only the last four digits of a Social Security number or taxpayer-identification number, the year of an individual's birth, a minor's initials, and the last four digits of a financial account number. Federal criminal practice has a parallel provision in Rule 49.1 of the Federal Rules of Criminal Procedure.

Two points matter more than the list itself. First, the responsibility to redact rests with counsel and with the party or nonparty making the filing — the clerk's office does not screen your document for identifiers before it lands on the docket. Second, Rule 5.2 is a floor, not a ceiling: the Federal Judicial Center's review of local district and appellate rules found a substantial body of local requirements layered on top of the national rule, so the operative checklist is the national rule plus your district's local rules and the judge's standing orders. Sensitive material that is not on the Rule 5.2 list — trade secrets, medical detail, privileged communications, third-party identities — is governed by sealing practice and protective orders rather than by the redaction rule, and needs its own analysis.

Why does a public docket make a redaction error permanent?

Because publication on a public docket is instantaneous and irreversible in practice. Federal filings become available through PACER, the judiciary's public electronic case-record system, the moment they are accepted; anyone with an account can download the PDF, and once downloaded there is nothing to recall. In the Manafort episode the hidden text was extracted and reported within minutes of the filing going public. A corrected filing was entered afterward, which fixed the docket but not the internet.

The same asymmetry applies elsewhere in a matter. A discovery production goes to opposing counsel, their experts and their vendors — a wider audience than most attorneys picture when they hit export, and one with a professional incentive to look hard at what you covered up. Native-format productions carry their full revision history with them; the UN's 2005 Mehlis report on the Hariri assassination was published as a Word file whose tracked changes showed the names an earlier draft had contained, a failure no black box would have prevented. Treat metadata removal as part of redaction, not as a separate housekeeping step; our guide to removing metadata from a PDF covers what actually travels inside the file.

Should client files pass through unknown third-party servers?

In redaction for lawyers the choice of tool is itself a confidentiality decision: every upload of a client document to an online service is a disclosure you have to be able to justify. Rule 1.6(c) does not forbid vendors, and its comment framework weighs sensitivity against cost and practicality — but that analysis assumes you know a few answers. Who operates the service? Where is the file stored, and under whose jurisdiction? How long is it retained after processing? Who at the vendor can open it, and is there a written confidentiality commitment? For a free web converter found through a search result, the honest answer to all five is usually "no idea."

The cleanest way to satisfy the duty is to make the question moot: process the file where the file already is. SladdPDF runs entirely in the browser using pdf.js and pdf-lib — the PDF is opened, redacted and exported on your own machine, and nothing is ever sent to a server. It works offline once the page has loaded — switch off the network, redact a document, and watch it export anyway. Be aware of the limits before you standardize on it: the free version exports at standard resolution, and print-quality 300 DPI export requires a paid Pro license key — the page count is unlimited. For a 900-page production set with search-and-redact and audit requirements, a desktop tool such as Adobe Acrobat Pro with a proper redaction workflow is still the better fit — the principle to carry across is the same one either way.

What about pasting client documents into cloud AI tools?

Pasting an unredacted client document into a general-purpose AI assistant is the newest version of the same problem, and the ABA has addressed it directly. Formal Opinion 512, issued by the Standing Committee on Ethics and Professional Responsibility on July 29, 2024, sets out the obligations that attach to generative AI use: competence, confidentiality, communication with the client, candor toward the tribunal, supervisory responsibility over lawyers and staff, and reasonable fees. On confidentiality, the opinion's practical warning is that lawyers should understand whether information entered into a tool could improperly surface in a later output.

That converts into a simple sequencing rule. Redact first, then paste — not the other way around. Before a client file goes anywhere near a chat window, remove names, account numbers, identifiers and privileged passages, and strip the metadata; then work with the sanitized version. Also read the tool's terms on retention and model training, distinguish consumer tiers from enterprise ones with contractual data protections, and set firm policy centrally. Doing the redaction locally is what keeps the sanitizing step from becoming its own disclosure.

How do you redact a PDF so the content is actually gone?

A defensible redaction removes the underlying content and then destroys the possibility of reconstruction, in that order. The mechanics are straightforward:

1. Work on a copy. Keep the unredacted original in the matter file — you may need to show what was withheld and why.
2. Mark every instance. Search the document for each name, number and term you are removing, so nothing survives in a footnote, caption, header or exhibit list.
3. Apply the redaction, then flatten. In SladdPDF this is Secure mode, which rasterizes each page to a flat image after redaction, so the text, layers and hidden objects underneath are destroyed. Fast mode draws vector overlays and warns that underlying text may still be extractable — use it for drafts, never for a filing.
4. Remove metadata on export. Title, author, creation tool and hidden tags all travel with the file unless you strip them.
5. Verify the export, not the preview. Reopen the produced file, select all, copy, paste into a text editor, and search for the terms you removed. Zoom to 400% on any scanned page to confirm nothing shows through.

If you want the step-by-step version with screenshots of each control, see the redaction tool itself or our walkthrough on how to redact a PDF for free.

What does a defensible pre-filing checklist look like?

Redaction for lawyers is judged on process, so a defensible checklist is one that produces evidence of reasonable effort: named steps, a fixed order and a second pair of eyes. Adapt this to your practice and put it in the file:

1. Confirm the governing rules: FRCP 5.2 or Rule 49.1, plus local rules and the judge's standing orders.
2. Identify what must be redacted (statutory identifiers) and what should be sealed or produced under protective order instead.
3. Redact from a copy; retain the unredacted original with a note of the basis for each withholding.
4. Run a term-by-term search so every instance is caught, including headers, footers, captions and exhibit indexes.
5. Check derived text: bookmarks, tables of contents, transcript word indexes, embedded attachments.
6. Flatten or rasterize the pages — do not file a document whose redactions are still separate objects.
7. Strip document metadata and confirm the properties panel is clean.
8. Run the copy-paste test and a text search on the final export, not on the working copy.
9. Have someone other than the person who redacted it sign off before filing.
10. Record who redacted, who verified, which tool and version, and the date — that record is what demonstrates reasonable effort if the question ever arises.

None of this is exotic. It is the discipline you already apply to a conflicts check, applied to a document — and it is what keeps a formatting mistake from becoming a disclosure.

This article is general guidance, not legal advice.