TFN redaction and secure document handling

The test is whether the underlying information is gone from the version being shared — and whether every copy created during the process is protected.

A tax file number is a government-related identifier with specific rules.

The OAIC explains that the Privacy (Tax File Number) Rule 2015 governs the collection, storage, use, disclosure and security of TFN information. Its published list of lawful recipients also notes that requesting, recording, using or disclosing TFNs outside permitted circumstances can be an offence under the Taxation Administration Act 1953.

A bank may be a lawful TFN recipient for particular taxation-related purposes. That does not mean every broker, employee, CRM, referral partner or document recipient can request and use a TFN for identity or credit assessment.

The OAIC states that if a requested document includes a TFN, the individual is allowed to cross it out or remove it before handing over the document — even where the requesting body is otherwise permitted to collect TFNs.

Drawing a shape, highlight or annotation over text may only change what the page looks like.

The original text can remain selectable, searchable, copyable, present in an OCR layer, contained in comments or attachments, stored in metadata, or recoverable by removing the overlay.

A proper redaction tool removes the selected content when redactions are applied, and can sanitise hidden information. Adobe’s current Acrobat Pro instructions distinguish marking from applying redactions, and provide an option to remove hidden information before saving the sanitised copy.

Do not say “redacted” while the value still exists underneath.

Physical redaction can create a flattened image when performed and rescanned correctly, but it adds more copies and handling steps.

If the approved procedure permits it:

1. print only the required pages in a controlled area;
2. cover the value completely with an opaque permanent marker;
3. check the value cannot be read under bright light or through the reverse side;
4. scan the redacted copy as a new flattened file;
5. inspect the scan at high zoom;
6. confirm OCR has not recreated the hidden value;
7. secure or destroy the printed pages under the approved procedure; and
8. verify the final PDF as described above.

Printing is not automatically more secure. The printer queue, device storage, output tray, paper copy and scan destination all become part of the information lifecycle.

This is a capability list, not a ranking, and not a hands-on review.

ApplyOnline supporting documents

Published user guidance describes built-in redaction for TFNs and sensitive information before documents are sent to participating lenders. Availability and behaviour may depend on the aggregator, lender and current platform configuration.

Adobe Acrobat Pro

Adobe documents permanent text and image redaction, application of marked redactions, and sanitisation of hidden information. Confirm whether cloud or AI features are permitted for client documents in your environment.

Nitro PDF Pro

Nitro’s documentation describes a two-step mark-and-apply process that permanently removes selected text or images when redactions are applied and the PDF is saved. Validate the current product, deployment and security settings before use.

Other enterprise PDF and document tools

Evaluate any tool against permanent removal rather than annotation, OCR and scanned-image handling, hidden-data sanitisation, batch search and review, audit trail, local versus cloud processing, data location and subprocessors, role-based access and MFA, retention and deletion, contractual permissions, and a test showing the value cannot be recovered.

Do not upload client documents into a free online “black out PDF” website without completing the required privacy, security and processor assessment.

Do not forward it further.

1. restrict access to the smallest authorised group;
2. follow the approved incident and TFN-handling procedure;
3. determine whether the brokerage is permitted or required to retain the source;
4. create and verify the redacted version where appropriate;
5. remove unnecessary copies from inboxes, downloads and temporary locations under policy;
6. record the event without reproducing the TFN; and
7. assess whether unauthorised access or disclosure requires escalation under the privacy and data-breach process.

The OAIC’s TFN guidance identifies training, access restriction, audit logs, secure transmission procedures, and physical and ICT controls as examples of security measures.

Remove what the recipient does not need.

Use an approved permanent-redaction tool, preserve the required evidence, verify the actual output, and control every copy from receipt through destruction or required retention.

The black bar is only the visible result. Secure handling is the whole process.