Redacting medical records for a demand packet starts with defining the disclosure. A packet sent to an insurer or another party is different from a filing on a public court docket. The recipient, authorization, applicable law, and purpose determine the review.
Have the responsible attorney or authorized professional approve the scope before removing information. Do not redact a relevant prior condition, treatment history, or unfavorable fact merely because it complicates the claim.
Confirm the basis for sharing
Medical records can be subject to authorization requirements, privacy rules, protective orders, contractual terms, and disclosure duties. Identify which apply to the sender and proposed recipient.
For covered entities, HHS explains specific circumstances for disclosures in judicial and administrative proceedings. A court order and a subpoena without a court order have different requirements. That guidance is not blanket permission to send records with a demand letter.
Keep the authorization or other applicable basis for disclosure with the matter record. Escalate uncertainty instead of asking a redaction tool to decide whether disclosure is lawful.
Separate identifiers from medical substance
Prepare an instruction distinguishing information to remove from information the recipient needs. Potential review targets include account numbers, government identifiers, contact details, and unrelated third-party information.
The decision is context-specific. A patient's name or treatment date may be necessary to evaluate a demand. An unrelated person's information in a note may need special handling. Apply the approved scope consistently across clinical records, billing pages, cover sheets, and attachments.
Do not import public filing rules wholesale into private correspondence. Federal Rule of Civil Procedure 5.2 addresses court filings and has its own requirements and exceptions.
Preserve the original and document review
Store the original in the approved matter system and prepare a separate working copy. Organize pages so reviewers can identify missing records and compare the export with its source.
- Inventory documents and confirm the approved disclosure scope.
- Identify repeated identifiers, including variants and OCR errors.
- Review proposed redactions page by page where necessary.
- Check that required medical and factual context remains.
- Apply redactions and export a clearly distinguished final copy.
- Have the designated reviewer approve that copy before release.
If records are also being produced in litigation, resolve discovery obligations, objections, and protective orders with counsel. Redaction should not silently replace that process.
Inspect scans, tables, and attachments
A PDF can contain searchable text on one page and only an image on another. Identifiers may appear in handwritten margins, patient labels, barcodes, billing tables, or attachments.
Search cannot establish that every occurrence has been found. Inspect difficult pages and anything OCR could not read reliably. Avoid broad instructions that remove whole sections without an approved reason.
Verify the exported file
Open the finished copy separately. Check expected redactions, search for known identifiers, and test whether underlying text remains selectable or copyable. Review metadata, comments, and attachments as appropriate.
The free Redacto checker can flag certain technical PDF issues locally in the browser. Pair it with the QA checklist and the attorney's scope review.
For repeated packets, try Redacto on an approved sample and measure both missed items and review time. This workflow guide does not determine disclosure obligations for a particular claim.