BASALT · JOURNAL
Redacting student records
Education records are requested by parents, by other agencies, in litigation and under public records laws, and they are released by staff who are rarely document specialists.
What normally comes out
Names and identifiers of students other than the subject of the request. Grades, disciplinary records and attendance for those other students. Staff personal contact details. Medical and counselling information, which usually carries protection beyond ordinary record rules.
The problem specific to schools
Small cohorts make anonymisation fail.
Removing a name from an incident report does not anonymise anyone if the report describes the only student in the year group who plays a particular instrument, or the only one in a wheelchair. The identity is recoverable from context by anyone at the school, which is precisely the audience the redaction was protecting against.
This is the most common failure in education redaction and no tool detects it. It requires someone who knows the setting to read the redacted output and ask whether they can still tell who it is.
Practical points
Class lists and group photographs carry many students at once and are frequently attached to documents about one student.
Email threads to parents often carry other parents in the recipient lines.
Handwritten notes scanned in cannot be searched, so a text search of the document will not find names that appear only in handwriting. They have to be read.
Checking the output
Extract the text and search for every name you removed. Read the metadata, which in documents produced from school information systems frequently carries the student identifier or the staff member who generated the report.
Then hand the redacted version to a colleague who knows the cohort and ask them who it is about. If they can tell you, the redaction is not finished.
This is a description of common practice rather than legal advice. Obligations vary by jurisdiction and by the terms you are working under, and the authority that governs your work is the one to check with.
Frequently asked questions
What must be redacted from student records before release?
Names and identifiers of students other than the subject, their grades, discipline and attendance, staff personal contact details, and medical or counselling information, which usually carries protection beyond ordinary record rules.
Why does removing names not always anonymise a student record?
Because small cohorts make identity recoverable from context. A description that fits only one student in a year group identifies them to anyone at the school regardless of whether the name was removed.
How do I check a student record redaction?
Extract the text and search for every removed name, read the metadata for student or staff identifiers, and then ask a colleague who knows the cohort to read the redacted version and say who it concerns.
Do handwritten notes need different treatment?
Yes. Scanned handwriting is not searchable, so a text search will not find names appearing only in handwriting. Those pages have to be read rather than searched.
Doing it in Basalt
Basalt is a native macOS PDF toolkit built around redaction that removes content rather than covering it. After writing a file it re-opens its own output with an independent parser, searches for the material again, and refuses to save if anything is found. It also strips metadata, XMP, attachments, embedded scripts and hidden layers as part of the same operation, and a separate Inspector reports what any PDF still hides, including documents Basalt did not create. Everything runs on your Mac: the engine holds no network entitlement at all, which macOS enforces at the code-signature level. A one time $29 licence covers up to three Macs, free for the first 24 hours. basaltformac.com, or brew install --cask chipmunk1101/tap/basalt.
Redaction that proves itself
Basalt destroys the content you mark, then re-opens the file it wrote and proves the content is gone before it saves anything. Your documents never leave your Mac.