How to redact medical records before sharing them
Schools, employers, insurers, gyms, and camps ask for medical documentation constantly — a vaccination record, a clearance letter, proof of a diagnosis. What arrives from the patient portal is usually far more: member IDs, your date of birth, and every unrelated condition in your history. Once you hand a copy over, HIPAA's protections on your provider don't travel with it. Redact before it leaves your hands.
What to redact (and what to keep)
- Redact: SSN and insurance member ID. Medical identity theft — someone billing care against your coverage — starts with exactly these.
- Redact: unrelated diagnoses and medications. Sharing a physical-clearance form doesn't require disclosing mental-health entries, reproductive care, or prescription history that isn't relevant.
- Redact: family members' names and details that appear in intake and history sections — their privacy isn't yours to give away.
- Consider: date of birth and address if the recipient already knows who you are.
- Keep: your name, provider name, date of service, and the specific finding or clearance the recipient needs. A fully-blacked-out record proves nothing.
In a lawsuit or insurance claim? Don't redact records that are part of discovery or claims processing on your own — what can be withheld there is a legal question. This guide is for voluntary sharing: schools, employers, coaches, camps.
Why the usual methods fail on medical PDFs
Patient-portal PDFs are text-based — a black rectangle drawn on top leaves the diagnosis codes and IDs recoverable underneath. And uploading medical records to a free web PDF tool means transmitting the most legally protected document category you own to an unknown server. The only comfortable answer is redaction that provably never leaves your device.
Redact your records in three steps
- Drop the PDF on redactoronline.com. It renders locally in your browser — no upload exists to intercept, and it works with the internet disconnected.
- Mark what shouldn't travel. Search a member ID once to mark it everywhere; left-drag across diagnosis lines — boxes snap to the row. Faxed or scanned records: run "Scan (OCR)" first, on-device.
- Click "Redact & download". Marked content is destroyed at the pixel level, pages are rebuilt as flat images, and the file's metadata is stripped.
Common questions
Is this HIPAA compliant? HIPAA governs providers, insurers, and their partners — not what you do with your own copy. What matters here: your records are never transmitted anywhere, so there's no third party involved at all. We make no compliance certifications; there's simply no server to certify.
Can I redact a faxed or scanned record? Yes — "Scan (OCR)" recognizes the text in your browser (the page never leaves your device), and then search and auto-detect work normally.
Can the blacked-out entries be recovered? No. The output contains flattened page images with the marked regions destroyed — there is no text layer or hidden annotation to peel back.