In 2016, the Australian Department of Immigration released a report on conditions at the Manus Island detention centre. Certain names and details had been redacted — black bars, placed carefully over sensitive text. Standard procedure.
Within hours, a journalist selected all the text, pasted it into a text editor, and published the lot. Every name. Every detail. Every bar was cosmetic. The text underneath was completely intact.
This wasn’t a hack. It wasn’t even clever. It was copy and paste.
And it keeps happening. The US Department of Justice did it in the Manafort case. The UK Ministry of Defence did it in an Afghanistan report. Corporate law firms do it routinely in discovery documents. People draw a rectangle, change the colour to black, and move on with their day.
The problem is definitional. Most people think “redact” means “cover.” It doesn’t. Redaction — actual redaction — means destruction. The text is removed from the file structure. Not hidden. Deleted. The characters no longer exist in the document. What’s left is a visual marker where content used to be, with nothing behind it.
A black bar drawn in Preview, Acrobat’s annotation tools, or any standard PDF editor is not redaction. It’s decoration. The data layer is untouched. Select all, paste — there it is. Search the document — there it is. Open the PDF in a text editor — there it is.
This matters more than it used to. The word “redact” is in mainstream conversation now. People see redacted government documents and have opinions about them. But most people — including professionals who handle sensitive documents for a living — couldn’t tell you the difference between a cosmetic bar and a destructive redaction if their careers depended on it.
And sometimes their careers do depend on it.
True redaction requires a tool that strips the selected text from the PDF at the data level. Not a layer on top. Not an annotation. A permanent removal. The kind where, if you try to select the area afterward, there’s nothing to select. Where a search returns zero results. Where the content isn’t hidden — it’s gone.
The other thing nobody talks about: most online redaction tools require you to upload the document first. Think about that for a moment. You have a document sensitive enough to need redaction — a legal filing, a medical record, an employment contract — and the first step is to send it to someone else’s server.
There are tools that do this locally. On your device. Where the file never leaves your machine and the redaction is destructive, not cosmetic. That’s the standard. Everything else is a black rectangle and a prayer.