EverydayPDF Logo
All Tools
Home/Blog/Redact Aadhaar & PAN
⚖️ Legal Practice

How Advocates Redact Aadhaar & PAN from Court Filings (DPDP-Safe Method)

A step-by-step guide for advocates, AoRs, and junior counsel who need to permanently remove Aadhaar numbers, PAN, mobile numbers, and email addresses from vakalatnamas, bail applications, charge sheets, and RTI replies — without uploading a single page to any server.

February 28, 2026·10 min read

⚠️ DPDP Act 2023 — Section 8(3) Compliance Alert

Under the Digital Personal Data Protection Act 2023, disclosing Aadhaar, PAN, or mobile numbers of non-party individuals in court filings without consent may attract penalties up to ₹250 crore. Simply drawing a black box over text does not constitute redaction — the text remains copy-pasteable in the PDF layer.

Why "Black Box" Redaction Is Dangerous for Court Documents

Most advocates use the rectangle tool in Adobe Reader to draw a black shape over Aadhaar/PAN numbers. This is not redaction. The original text remains in the PDF content stream. Any opposing counsel can:

  • Select the text underneath the black box and copy it to clipboard
  • Use Ctrl+F to search for the pattern (e.g., 12-digit Aadhaar format)
  • Open the PDF in a text editor and read the raw content stream

In K. S. Puttaswamy v. Union of India (2017), the Supreme Court established the right to informational privacy as a fundamental right. Advocates who fail to properly redact client PII from filings risk professional misconduct proceedings under the BCI Rules.

What "True Redaction" Actually Means

True redaction permanently destroys the underlying text data. After proper redaction:

  • The text cannot be selected, copied, or searched
  • The PDF content stream no longer contains the characters
  • Even forensic tools cannot recover the original text
  • The visual appearance shows a clean black bar

EverydayPDF achieves this by rasterising the redacted page at 2× resolution, replacing the entire page content stream with the flattened image. The original text is permanently destroyed.

Step-by-Step: Redact PII from Court Filings

Step 1: Upload Your PDF

Go to Auto Redact and drop your filing PDF. The file stays on your device — nothing is uploaded to any server.

Step 2: Auto-Detection Scans for PII

The tool automatically detects these Indian PII patterns:

🆔
Aadhaar
12-digit format
💳
PAN
ABCDE1234F
📞
Mobile
+91 / 10-digit
📧
Email
user@domain
🏢
GST
22AAAAA0000A1Z5
🏦
IFSC
SBIN0001234
🛂
Passport
A1234567
📋
All PII
Auto-detected

Step 3: Review & Select What to Redact

You maintain full control. The review screen shows every detected item with its type, value, and page number. Uncheck any finding that should remain visible (e.g., the accused person's PAN in a tax evasion complaint).

Step 4: Apply & Download

Click "Apply Redaction" and download the redacted PDF plus a DPDP compliance certificate documenting what was redacted, when, and by which method.

Common Use Cases for Indian Advocates

Bail Applications (Cr.P.C. §439)

Redact co-accused Aadhaar/PAN from bail petitions before filing in Sessions Court.

RTI Replies & Appeals

Remove third-party mobile numbers and emails from RTI documents before publishing or sharing.

Vakalatnamas with KYC

Redact client Aadhaar from filed vakalatnamas that become part of court record.

Arbitration Awards

Remove bank account details & IFSC codes from arbitral awards before citation in fresh suits.

NCLT/DRT Filings

Redact PAN & GST of guarantors from applications under IBC §7/§9 before uploading to e-filing.

FIR Copies & Charge Sheets

Remove victim/witness Aadhaar numbers before annexing FIR copies to anticipatory bail petitions.

Why This Is DPDP 2023 Compliant

The DPDP Act (Section 4-8) requires data processors to minimize personal data disclosure. EverydayPDF's approach satisfies compliance because:

  1. No data leaves your device — processing happens entirely in the browser using WebAssembly
  2. True redaction — the underlying text is permanently destroyed, not just obscured
  3. Audit trail — a compliance certificate documents redaction actions for record-keeping
  4. No third-party processor — no DPA (Data Processing Agreement) required since no data transfer occurs

Redact your next court filing in 30 seconds.

Auto-detect Aadhaar, PAN, GST, phone, and email — all on your device.