How to remove personal data from a PDF before sharing it
Covering text with a black box does not always remove it. A PDF may retain selectable text, comments, layers, properties, attachments or a revealing file name. Verification must be performed on the exported copy.
1. Identify the kind of PDF you have
Try selecting a sentence. If it can be copied, a text layer exists. If every page is an image, OCR is needed; recognition can confuse characters and requires a visual check.
- Keep an untouched source file.
- Identify scanned pages, forms and attachments.
- Check digital signatures: editing or rebuilding may invalidate them.
2. Remove more than the name
Review body text, headers, footers, stamps, signatures and codes. Look for emails, phones, addresses, identity numbers, accounts, vehicle plates, references and combinations of date, role or location.
- Use consistent placeholders where the narrative must remain clear.
- Delete unnecessary pages instead of hiding them.
- Generalise exact details when they are not essential.
3. Clean properties and hidden elements
Title, author, company, comments, layers and forms can remain. A rebuilt copy reduces inherited properties, but it can change the layout.
- Use a trusted document inspection feature.
- Give the final file a neutral name.
- Do not put the client, candidate, case or diagnosis in the file name.
4. Verify the copy as the recipient would
Close the editor and open the export in a different viewer. Search for every removed value, try copying edited areas and inspect every page. Ask for a second review for high-risk material.
- Check search, copy and paste, and properties.
- Confirm figures, duties and tables.
- Record the review without retaining unnecessary data.
Limitations to keep in mind
- Privalume extracts PDFs with a text layer; it does not process images or provide OCR.
- Rebuilding may alter layout, tables, signatures and interactive elements.
- No automated search proves anonymisation against every external source.