Redaction is where careful scoping gets implemented, and where it most often fails for reasons that have nothing to do with judgement.
What gets redacted
- Third-party data. Records about the named account frequently contain information about other people: the other side of a conversation, other names on a shared payment method, other users in a group. Those people are not the subject of the request.
- Out-of-scope material. Records outside the date range or data type specified.
- Material beyond the instrument’s authority. Content appearing in records responsive to a subpoena, for example.
- Privileged material, where applicable.
The technical failure mode
The recurring problem is that redaction is treated as a visual operation. Covering text with a black rectangle in a PDF, changing the font colour to match the background, or cropping a screenshot in a viewer all leave the original data present in the file.
| Visual masking | True redaction | |
|---|---|---|
| Data present in the delivered file | Yes | No |
| Recoverable by copy and paste | Often | No |
| Recoverable by text extraction | Yes | No |
| Survives format conversion | No; often exposed | Yes |
| Suitable for production | No | Yes |
The correct approach is to remove the data and then generate the output file from the redacted source, or use tooling that genuinely deletes content rather than layering over it. Verifying by extracting text from the finished file (not by looking at it) is the check that catches the failure.
Documenting redactions
A production that silently omits material is difficult to distinguish from an incomplete one. Marking that a redaction was applied, and the basis for it, serves the recipient and the producer both: the agency can challenge a redaction it disputes, and the company has a record of a decision it may need to explain much later.
Why this is a user protection
Third-party redaction is the clearest case. A request concerns one account, but the data held about that account inevitably describes other people who are not suspects, are not named, and have no notice and no opportunity to object. Nobody is advocating for them in the process. Redaction is the mechanism by which their data stays out of an investigation that was never about them, and it only happens if the producing company does it deliberately.