Redaction
What is Redaction?
The process of removing or obscuring sensitive personal information from documents or datasets before sharing or publication.
Terms that appear alongside redaction
Each of these is named in at least one of the same controls as redaction. The number is how many controls name both.
- ccpa 3 shared controls
- gdpr 3 shared controls
- data minimisation 2 shared controls
- data subject 2 shared controls
- data subject rights 2 shared controls
- confidentiality 2 shared controls
- nist 2 shared controls
Frameworks that govern redaction
What the standards actually require on redaction
Requirements naming redaction across 6 standards, quoted from the control text.
Article 80 establishes the EU portal as the single entry point for the submission of data and information relating to clinical trials in the Union (the public-facing layer of CTIS).
CTR-Art.80_81_82 · EU portal, EU database and functionality (Articles 80-82) - CTIS →Article 9(1): Member States shall ensure that national courts may order, on the request of an injured person claiming compensation for damage caused by a defective product who has presented FACTS + EVIDENCE SUFFICIENT TO SUPPORT THE PLAUSIBILITY OF THE CLAIM,...
PLD-Art.9 · Disclosure of evidence (PLD Article 9) - the new procedural disclosure regime →Produce reviewed ESI in agreed formats with appropriate redactions, load files and production logs.
27050-3.6 · Production of ESI →Coordinate with external parties and handle privacy and breach incidents per NIST SP 800-61 Rev 2 Chapter 4 (Coordination and Information Sharing).
NISTSP61-7 · Coordination, Information Sharing, Privacy and Breach Response →Handle privacy and sensitive content in logs + cloud/SaaS log considerations per NIST SP 800-92 Section 5.11 (Confidentiality and Privacy) + updates aligned with modern cloud-era practice + GDPR + CCPA + sectoral privacy law + HIPAA Privacy Rule.
NISTSP92-7 · Privacy in Logs, Sensitive Content Handling, Cloud and SaaS Log Considerations →Address OWASP LLM02:2025 Sensitive Information Disclosure + Privacy and Lawful Basis for LLM Processing. Sensitive Information Disclosure occurs when LLM systems disclose training data + user data + system data including PII + credentials + intellectual proper...
OWASPLLM-3 · Sensitive Information Disclosure and Privacy (LLM02) →Questions people ask about redaction
What is Redaction?
Why is Redaction important for compliance?
Which compliance frameworks address Redaction?
Where can I learn more about Redaction?
See how Redaction applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.