When redacting information, what should be documented?

• A. Rationale, policy cited, and securely store redacted portions.
• B. The redacted content is included in the final copy.
• C. No documentation is necessary.
• D. Redactions should be made but no record kept.

Answer: (A)

When information is redacted, you need an audit trail that explains why the redaction was made. This means documenting the rationale for withholding information, citing the policy or legal authority used (such as a specific exemption or privacy rule), and securely storing the redacted portions themselves. Keeping this documentation ensures accountability, allows supervisors or others to review the decision later, and supports compliance with laws and agency policies. It also helps protect sensitive material by keeping the redacted content in a controlled, secure location rather than exposing it in the final copy.

Including the redacted content in the final version would defeat the purpose of redaction, as it would reveal information that is supposed to be withheld. And having no documentation or no record of the redaction creates gaps in accountability and makes it difficult to justify the decision if questioned.