How to Redact Personal Information for GDPR Compliance
To redact personal information for GDPR work, identify every detail that points to a person, remove it from the file with a real redaction tool rather than a black shape, and test the saved copy. In Gold PDF you press R, drag over each identifier and save; redaction is a useful technical step, but it is not a guarantee of compliance on its own.
Quick steps
- Decide what the reader needs to see and what they do not, before you open the file.
- List the identifiers to remove: names, addresses, emails, phone and ID numbers, dates of birth, signatures and photos.
- Open a copy of the PDF in Gold PDF, never your only original.
- Press R and drag a box over each item, including repeats in headers, footers and page numbers.
- Press Ctrl+S and save under a new name.
- Reopen the saved file, search for each removed value with Ctrl+F, and copy across the bars into Notepad.
- Check the document properties and clear leftover metadata.
What counts as personal information in a PDF
GDPR defines personal data broadly: any information relating to an identified or identifiable living person. In a PDF that goes well beyond a name on the first page.
| Type | Examples |
|---|---|
| Direct identifiers | Full name, email address, phone number, home address, ID or passport number |
| Financial details | Bank account and card numbers, salary, tax references |
| Images | Photos, scanned signatures, handwriting |
| Indirect identifiers | Employee number, case or ticket reference, licence plate, job title in a small team |
| Special categories | Health information, union membership, religion, ethnicity (extra care needed) |
| Hidden in the file | Author and company fields, comments, file names, text in image layers |
The category that catches people out is indirect identifiers. A document with the name removed but a rare job title, a precise date and a street still points to one person. When you decide what to cover, ask what a reader could work out by combining what is left, not only what is printed in the obvious field.
When redaction is the right measure
Redaction is useful when you must share a document but a particular reader should not see some of the details in it. Typical cases include answering a data subject access request that contains other people's information, publishing a report with the names of staff or clients removed, sending evidence to a supplier, or sharing minutes with an outside party.
It is not a substitute for the questions that sit around it. You still need a reason to hold and share the data, a decision about retention, and a way to log what you did. Those belong to your organisation's data protection process, and the exact obligations depend on your role and country, so ask a qualified person if you are unsure. For court-style documents, how to redact names from a court document PDF goes through the same idea with names and case details.
Why a black box is not enough
A black rectangle drawn with a shape tool does not remove anything. The text remains under the bar and can be selected, copied, searched or read aloud by assistive software. Sharing such a file can leave personal data exposed while you believe it is protected, which is the opposite of what you intended.
Real redaction removes the text, image data and drawings under the marked area when the file is saved. In Gold PDF, each page that contains a redaction is rebuilt as a high-resolution image with the bars burned in, and the remaining text is restored as an invisible layer, so the rest of the page still searches and copies normally. The redacted values are not in that layer. How to redact a PDF so it cannot be undone explains the difference in detail.
How to check the redacted file
Do not stop at looking at the page. Verify the saved copy the same way every time.
- Search for it. Press Ctrl+F and enter each name, number and email you removed. There should be no results.
- Copy it. Drag across each bar, copy and paste into Notepad. Nothing from underneath should appear.
- Look for repeats. Names often recur in headers, footers, signatures blocks and attachments.
- Check the scans. If a page is an image, run OCR first so you can search it and find every instance. In Gold PDF that is Ctrl+Shift+O.
- Check the metadata. Author, title and subject fields can name a person. See how to remove metadata from a PDF before sharing.
- Keep a record. Note what you redacted, from which version, and why.
A longer checklist is in how to check if a PDF redaction is secure.
Working with groups of documents
When you redact the same person across many pages or files, consistency matters more than speed. Create a short list of the exact strings to remove, including spelling variants, initials and nicknames, and tick them off per document. Work from a copy of each file and keep the originals in a restricted folder, since the originals still contain the personal data and are subject to the same duties. Name the redacted versions clearly so nobody mistakes them for the originals, and send only the redacted copy. For contracts with prices, signatures and bank details, how to redact a contract before sharing it shows what to hide and what to leave readable.
A short example
Suppose a company must share a complaint file with an outside adviser. The adviser needs the story, not the people. You would remove the complainant's name, home address, phone number and signature, and the names of two colleagues mentioned in the notes. You would replace nothing, since the bars show that something was removed on purpose. If the adviser later needs to refer to a person, add a neutral label such as "Employee A" in a separate cover note, not in the PDF itself.
Then run the checks: search for each surname and the street name, look at the footer for a case number that could identify the complainant, and clear the author field. Only then send the tested copy, by a channel your organisation approves, and record what was shared and why.
What Gold PDF does and does not do
Gold PDF is a free Windows PDF editor that works offline: your files are not uploaded and no account is needed. Its Redact tool (R) removes the marked content on save, it can recognise text in scans for English and Hebrew without a connection, and saving clears the file's metadata. It does not find personal data for you, so you choose each area yourself, and it cannot decide whether you have a lawful reason to share a document. It cannot undo a redaction after saving, so keep a protected original, and it does not give legal advice. Gold PDF runs on Windows only.
For the tool overview, see Redact a PDF.
Frequently asked questions
Does redacting a PDF make it GDPR compliant?
Not by itself. GDPR concerns how personal data is handled overall: why you hold it, who sees it and for how long. Redaction is one practical measure that removes personal data from a copy you share, but it does not replace a legal basis, policies or advice from a data protection professional.
What counts as personal information in a PDF?
Anything that identifies a living person directly or in combination with other details: names, addresses, email addresses, phone numbers, ID and account numbers, dates of birth, photos, signatures, and sometimes job titles or case references.
Is a black box enough to remove personal data from a PDF?
No. A rectangle only covers the text, which stays in the file and can be copied or searched. Use a redaction tool that removes the content when you save, then test the saved copy.
Do I need to clear metadata as well?
Yes. Author names, file titles and other properties can hold personal data that never appears on the page, so check and clear them before the file leaves your hands.
Is anonymised data the same as redacted data?
Not necessarily. Removing a name does not always make a person unidentifiable, because the remaining details may still point to them. Whether data is truly anonymous is a legal and contextual judgement.
Gold PDF — the free PDF editor for Windows
Edit text, redact for real, OCR scans, fill forms, sign and protect. Offline, no account, no watermark.