How to Redact PDFs for Healthcare — Remove Patient Identifiers
Permanently redact patient identifiers from medical PDFs for research, FOIA responses, or sharing. True redaction, local processing, HIPAA-friendly.
Permanently remove patient identifiers from medical PDFs for research sharing, data subject requests, or FOI responses. FixMyPDF's Redact PDF tool performs true content removal locally — patient data never leaves your device.
Healthcare Redaction Requirements
HIPAA de-identification requires removing 18 specific identifiers (names, addresses, dates, phone numbers, National ID numbers, etc.) before data can be used for research without patient consent. GDPR requires removing personal identifiers before processing for secondary purposes. Redaction must be permanent — not annotation overlays.
The 18 HIPAA Safe Harbor Identifiers to Redact
Names, geographic subdivisions smaller than state, all dates (except year) for patients over 89, phone numbers, fax numbers, email addresses, SSNs, medical record numbers, health plan numbers, account numbers, certificate/licence numbers, VINs, device identifiers, URLs, IPs, biometric identifiers, photos, any unique identifier.
How to Redact Patient Data From Medical PDFs
Open fixmypdf.in/tools/redact. Upload the medical document. Draw redaction boxes over each patient identifier — work systematically through name, address, date of birth, NHS/patient number, and any other identifiable data. Click "Apply Redactions". Download. Verify before sharing.
True Redaction vs Annotation Overlay
Drawing black boxes in a PDF viewer leaves the underlying text accessible via copy-paste or text search. For medical records, this is a data breach waiting to happen. FixMyPDF's redaction permanently deletes the underlying text data — verified by trying to copy-paste from the redacted area.
Redacting for Case Studies and Research
Clinical case studies and research papers often include patient records as supporting data. Redact all identifiers before the manuscript is submitted for peer review or published. Run a text search for the patient's name after redaction to confirm no instances were missed.
FOI and Subject Access Requests
Healthcare organisations receiving Subject Access Requests must provide data about the requesting individual but redact data about third parties (other patients, staff members in certain contexts). Redact all third-party identifiers systematically before responding.
Local Processing as HIPAA Technical Safeguard
FixMyPDF processes entirely in your browser. PHI never reaches any external server during the redaction process. The unredacted original should be stored with appropriate access controls; only the de-identified version is shared externally.
Try Redact PDF Now — Free
Browser-based, private, and instant. No account or software required.
Open Redact PDF