The identifiers aren’t all in the header
Everyone remembers the name at the top. The ones that travel are the ones nobody looks at twice: the medical record number repeated in the page footer, the accession number on a lab result, the date of birth in a line of clinical text, the referring clinician’s direct line.
A record is also the worst document to over-redact. Take out the medication table and the reader can’t answer the question you sent the file to answer, so you get asked again, and the second request usually asks for more than the first would have.
Redacting medical records for a trial or a legal claim
A disclosure in a case wants almost the opposite of a privacy request. The patient identifiers still come out, but the timeline, the clinician who signed each note and the results all stay, because that is what the record is being read for.
What changes is who reads it. The copy goes into a case file, and people who check documents for a living will run the selection test that finds text under a rectangle. A page redrawn as an image is the only kind that survives it.
- Box: the patient’s name, address, date of birth, and every record or accession number.
- Keep: dates of care, the signing clinician, diagnoses, medication and results.
- Box the names of third parties named in the record, unless the case turns on them.
- Keep an unredacted copy for your own file. The redacted file is the one that leaves.
Separate the identifiers from the clinical content
Go through once and sort what’s on the page into two piles. Then box one pile and leave the other alone.
- Name and address
- Box unless the reader already has them and needs them to match the file.
- Date of birth
- Usually box. Keep the age if the reader needs to stratify it, and write it in the covering note instead.
- Record and accession numbers
- Box every occurrence. They reappear in the footer of each page, so check the whole document rather than the first page.
- Clinician names
- Box the direct contact details. The name itself is often needed so the reader knows who wrote it.
- Dates of care
- Keep. The timeline is clinical information, and removing it changes the meaning of the record.
- Diagnoses, medication, results
- Keep. This is the part the file was sent to communicate.
A box takes the whole page with it
On export, each page carrying a box is redrawn as an image at the resolution you choose, and the text layer goes with it. That’s what makes the covering real, because there’s no text left underneath to select or search.
The cost is that the page stops being searchable, including the clinical text you deliberately left visible. If a clinician is going to copy a result into their own system, note it in the covering letter, or send an unredacted copy through a channel you trust.
The export is checked, not promised
The tool reopens the file it just wrote, pulls the text off every page you boxed, and counts the characters. It reads 0 when the pages are clean. That figure is the only evidence that the covering worked, and it’s more useful than a tick beside a filename.
If the file has to satisfy a regulator, read this first
Redaction makes a document safe to send to the person you’re sending it to. It doesn’t make you compliant with anything. That depends on your legal basis for the disclosure, who the recipient is, and what your jurisdiction requires.
This site has no compliance certification and doesn’t claim one. What it does claim is narrower and checkable: the file is processed in your browser, and the covered text is gone from the exported file.