Redacting a Signed PDF: Meaning and Risks

What does redacting a signed PDF mean?

Redacting a signed PDF means removing selected information from a document that has already been signed. The result is a changed disclosure version; it should not silently replace the original file or be represented as identical to what the parties signed.

Redaction versus covering text

Drawing a black rectangle is not, by itself, secure redaction. The underlying text, images or other data can remain accessible. The US District Court’s redaction guidance stresses checking for hidden information that a PDF may still contain.

Likewise, flattening a PDF is not a substitute for checking that the intended information has actually been removed. Review the resulting disclosure version for the relevant visible and hidden information before sharing.

What happens to signature validation?

Changing signed content can remove or invalidate cryptographic signature evidence, even if a handwritten-looking mark is still visible. PDF signature validation concerns specific signed data and document versions. Permitted incremental actions do not imply that rewriting the agreement’s content preserves its signature status.

Keep the original signed file and relevant evidence under the required access controls. Identify the redacted version as a derivative, including enough context to distinguish it from the unredacted original without disclosing the removed information.

Before signing or after signing?

If the parties should agree to a version without certain content, prepare and review that version before obtaining the required signatures. If the purpose is a later limited disclosure, establish the permitted disclosure and privacy requirements separately. A redacted copy is not a way to silently change the terms already signed.

Preservation duties may require retaining the original despite creating a restricted disclosure copy. Decide which record must be kept and who may access it before overwriting or deleting source files.