Why a black box is not redaction
The most common redaction mistake is drawing a black rectangle over sensitive text in a PDF editor and assuming the text is hidden. It is not. A black rectangle is a visual overlay — a separate layer placed on top of the text. The underlying text remains fully intact in the PDF file. Anyone who opens the file in Adobe Acrobat, PDF-XChange, or any PDF editor can simply delete the black rectangle layer and read the text underneath instantly. This has caused numerous real-world data breaches, including court filings where attorneys blacked out witness names only to have journalists remove the box and publish the names.
What true redaction looks like
True redaction permanently removes the text data from the PDF and replaces the region with a solid colour that is part of the page content — not a separate layer. After true redaction, the text cannot be selected, copied, searched or recovered by any software. The black region is baked into the page itself. You can verify redaction worked by trying to click on the redacted text in any PDF viewer — if the text cannot be selected, the redaction is genuine.
How to redact a PDF properly using PDFWix
- Open PDFWix Redact PDF.
- Upload your PDF — it stays in your browser, never sent to any server.
- Draw redaction boxes over all sensitive text: names, ID numbers, account numbers, addresses, phone numbers.
- Click Apply Redaction. PDFWix flattens the marked regions — the text is permanently removed from the PDF data.
- Download the redacted PDF.
- Verify: try to select text in the redacted areas in any PDF viewer. If it is truly redacted, the cursor will not be able to select any text in those regions.
Redaction and GDPR compliance
Under GDPR (EU) and India's PDPB (Personal Data Protection Bill), sharing documents containing personal data of individuals without appropriate authorisation or anonymisation can constitute a data breach. Properly redacting personal identifiers (names, Aadhaar numbers, dates of birth, contact details) before sharing documents with third parties is a standard GDPR compliance measure. A black box overlay does not constitute anonymisation under GDPR — true permanent removal does. For protecting PDFs with passwords instead of redacting, see PDFWix Protect PDF.