8.2 Protecting Confidential Information & PII

8.2 Protecting Confidential Information & PII

Quick Summary: Court reporters bear a profound ethical and legal responsibility to safeguard Personally Identifiable Information (PII), Protected Health Information (PHI), trade secrets, and legally privileged communications. Federal Rules of Civil Procedure 5.2 and Criminal Procedure 49.1 set redaction standards for court filings. Reporters also work within the federal transcript redaction procedure and its 90-day delay on remote access, follow HIPAA-related agreements when they apply, honor protective orders, and keep sealed portions separate as the court directs.

The Federal Privacy Mandate: FRCP 5.2 & FRCrP 49.1

With the passage of the E-Government Act of 2002 and the nationwide deployment of electronic case filing via PACER (Public Access to Court Electronic Records) and CM/ECF (Case Management/Electronic Case Files), court records that were once accessible only by visiting a physical clerk's office became instantly viewable by the public worldwide. In response to the escalating threats of identity theft, financial fraud, and privacy invasion, the federal judiciary codified strict privacy protections:

• Federal Rule of Civil Procedure 5.2 (FRCP 5.2): Privacy Protection for Filings Made with the Court (civil proceedings).
• Federal Rule of Criminal Procedure 49.1 (FRCrP 49.1): Privacy Protection for Filings Made with the Court (criminal proceedings).

Under these federal rules, any document or electronic transcript filed with the court that contains sensitive personal identifiers must be redacted before being made available for public inspection.

+-----------------------------------------------------------------------------------------+
|                        Federal Mandatory PII Redaction Benchmarks                       |
+-----------------------------------------------------------------------------------------+
|  1. Social Security / Taxpayer ID : Truncate to LAST FOUR DIGITS (e.g., xxx-xx-4589)    |
|  2. Financial Account Numbers     : Truncate to LAST FOUR DIGITS (e.g., ****-****-1234) |
|  3. Dates of Birth                : Truncate to YEAR OF BIRTH ONLY (e.g., xx/xx/1984)   |
|  4. Names of Known Minors         : Use the MINOR'S INITIALS ONLY (e.g., J.D.)          |
|  5. Criminal Home Addresses       : Truncate to CITY AND STATE ONLY (FRCrP 49.1)       |
+-----------------------------------------------------------------------------------------+

Detailed Redaction Protocols

1. Social Security Numbers (SSNs) & Taxpayer Identification Numbers (TINs): Unless the court orders otherwise, a filing may include only the last four digits: XXX-XX-1234 or ***-**-1234.
2. Financial Account Numbers: Bank checking accounts, savings accounts, credit cards, brokerage investment portfolios, and loan numbers must be redacted to the last four digits: XXXX-XXXX-XXXX-9012.
3. Dates of Birth (DOBs): The specific month and day must be redacted; only the four-digit year of birth is permitted to appear: XX/XX/1976 or 1976.
4. Names of Known Minors: The name of an individual known to be a minor is reduced to the minor's initials: J.D. or M.T.
5. Home Addresses in Criminal Cases: Under Federal Rule of Criminal Procedure 49.1, a home address in a criminal filing is limited to the city and state.

Exemptions from the Redaction Requirement

FRCP 5.2(b) lists six exemptions; the redaction requirement does not apply to:

• A financial-account number that identifies the property allegedly subject to forfeiture in a forfeiture proceeding.
• The record of an administrative or agency proceeding.
• The official record of a state-court proceeding.
• The record of a court or tribunal, if that record was not subject to the redaction requirement when originally filed.
• A filing covered by Rule 5.2(c) or (d) (remote-access limits in Social Security and immigration cases, and filings made under seal).
• A pro se filing in an action brought under 28 U.S.C. §§ 2241, 2254, or 2255.

Bankruptcy cases follow a parallel rule, Federal Rule of Bankruptcy Procedure 9037.

---

The Federal 90-Day Electronic Transcript Policy & Redaction Timeline

The Judicial Conference of the United States adopted a policy on the electronic availability of transcripts, and district courts carry it out through their own procedures. Deadlines below reflect common district court procedures; always check the local version.

[Filing]           ──▶ Reporter files the official transcript; remote public access is restricted
       │
[7 business days]  ──▶ A party wanting redaction files a "Notice of Intent to Request Redaction"
       │
[21 days]          ──▶ The party submits a "Redaction Request" listing page and line for each identifier
       │
[31 days]          ──▶ Reporter performs the redactions and files the redacted transcript
       │
[90 days]          ──▶ Transcript (redacted version, if one was filed) becomes remotely available through PACER

Step-by-Step Schedule

1. Filing: The reporter files the official transcript with the clerk. For 90 days, the public can view it at the clerk's office public terminal but it may not be copied there, and it is not available through remote public access; parties who buy the transcript from the reporter can obtain copies.
2. Notice of Intent (commonly seven business days): Each party that wants personal identifiers redacted files a Notice of Intent to Request Redaction.
3. Redaction Request (21 days from filing): The party submits to the reporter a Redaction Request stating by page and line where the identifiers appear and how they are to be redacted. Requests to redact other information require a separate motion to the court.
4. Redacted Transcript (31 days from filing): Unless the court sets a longer period, the reporter performs the requested redactions and files a redacted version with the clerk. The clerk retains the original unredacted transcript, which is not publicly available.
5. Remote Access (after 90 days): The redacted transcript, or the original if no redaction was requested, becomes remotely available through PACER, unless a motion is still pending.

[!IMPORTANT] Division of Legal Responsibility: District court procedures under this policy state that the responsibility for redacting personal identifiers rests with counsel and the parties, and that neither the clerk nor the court reporter reviews transcripts for compliance. The reporter's job is to make the redactions the parties request.

---

Public Access, FOIA, and the Reporter's Role

Public access to a court record is not the same thing as a request under the federal Freedom of Information Act (FOIA). Federal FOIA, 5 U.S.C. § 552, generally provides access to records of federal executive-branch agencies. The statutory definition of agency excludes the courts of the United States. Federal court records instead are governed by court rules, sealing orders, clerk procedures, electronic-access policy, and constitutional or common-law access principles. State public-record and open-court laws use their own definitions and exceptions.

For the reporter, the operational lesson is source and authority: identify whether the request concerns an agency record, a filed court record, an unfiled deposition, shorthand notes, backup audio, or a sealed volume. Do not release material merely because a requester calls the demand a FOIA request. Route court-record requests through the applicable clerk, order, local rule, and office policy; protect nonpublic deposition material and backup media under the governing law and NCRA ethics guidance.

ADA Equal Access and CART

The Americans with Disabilities Act requires effective communication by covered entities. Title II applies to state and local government services, including courts; Title III covers businesses and nonprofit organizations that serve the public. An auxiliary aid may include real-time captioning, also called computer-assisted real-time transcription or CART. The appropriate aid depends on the nature, length, complexity, and context of the communication and the person's usual method of communication. A Title II entity must give primary consideration to the aid requested unless it can establish an applicable limitation and must still provide an effective alternative when available.

A reporter should establish the assigned role before the proceeding. The official reporter creates the legal record; a CART provider supplies communication access. One professional may sometimes be qualified and retained for a particular role, but the work product, recipients, display, retention, confidentiality, and certification expectations can differ. Follow the court's accommodation plan, protect the consumer's privacy and independence, test the display path, and do not assume that an unofficial CART stream automatically is the certified transcript.

---

HIPAA Compliance in Litigation: Protecting Health Information (PHI)

In civil depositions involving medical malpractice, personal injury, pharmaceutical product liability, and worker's compensation, court reporters routinely record intimate medical diagnoses, surgical procedures, psychiatric evaluations, and pharmacological regimens.

The Health Insurance Portability and Accountability Act (HIPAA)

HIPAA's Privacy and Security Rules strictly regulate the disclosure of Protected Health Information (PHI):

• Covered Entities: Hospitals, healthcare providers, health maintenance organizations, and health plans.
• Business Associates: Under 45 CFR 160.103, a person who creates, receives, maintains, or transmits PHI on behalf of a covered entity, or who provides services such as legal, accounting, or consulting services to a covered entity when those services involve PHI. A subcontractor handling PHI for a business associate is also a business associate. A law firm defending a hospital can be the hospital's business associate, and a reporter it hires to handle PHI may be asked to sign a subcontractor agreement.

The Business Associate Agreement (BAA)

When a reporter or agency is engaged in a way that makes it a business associate or subcontractor, the client may ask it to sign a Business Associate Agreement (BAA). Whether one is needed depends on the relationship, so agencies often get legal advice. A typical BAA commits the reporter to:

• Using appropriate administrative, physical, and technical safeguards for electronic PHI (ePHI).
• Protecting transcript files and audio, typically with encryption in transit and at rest.
• Reporting security incidents and breaches involving PHI as the agreement requires.
• Requiring scopists, proofreaders, and other subcontractors who handle PHI to agree to the same restrictions.
• Returning or destroying PHI when the engagement ends, where feasible.

[!NOTE] Qualified Protective Orders: HIPAA lets covered entities disclose PHI in litigation under certain conditions, including a qualified protective order that prohibits using or disclosing the PHI for any purpose other than the litigation and requires returning or destroying it when the litigation ends. Reporters handling medical testimony should share transcripts and medical exhibits only as such orders and the parties' instructions allow.

---

Handling Trade Secrets, Privileged Communications & Protective Orders

High-stakes commercial litigation frequently involves proprietary corporate assets—such as proprietary software source code, industrial manufacturing formulas, financial pricing models, and confidential customer databases—governed by the Defend Trade Secrets Act (DTSA) and state Uniform Trade Secrets Acts (UTSA).

Navigating Protective Orders

In commercial litigation, the court enters a stipulated Protective Order governing the handling of discovery materials. Reporters must be intimately familiar with confidentiality classifications:

• Confidential: Information that contains non-public business, financial, or personal data. May be viewed by the parties, their counsel, expert witnesses, and court personnel.
• Confidential - Attorneys' Eyes Only (AEO): A higher tier for especially sensitive material such as trade secrets or pricing data. AEO material generally may not be shown to the client's own business people; access is typically limited to outside counsel, approved experts, and court personnel, as the order specifies.

Attorney-Client Privilege & Work-Product Doctrine (FRE 502)

During depositions, counsel may inadvertently disclose privileged attorney-client communications or attorney work product (e.g., notes prepared in anticipation of litigation under FRCP 26(b)(3)):

• Federal Rule of Evidence 502 (FRE 502): Attorney-Client Privilege and Work Product; Limitations on Waiver. Under FRE 502(b), a disclosure in a federal proceeding does not operate as a waiver if it was inadvertent, the holder took reasonable steps to prevent disclosure, and the holder promptly took reasonable steps to rectify the error.
• Clawback Orders and Agreements: Courts can enter clawback orders under FRE 502(d), and parties can make clawback agreements under FRE 502(e). If an attorney inadvertently produces a privileged memo or asks a question probing privileged discussions, counsel will assert a clawback on the record.
• The Reporter's Role in Clawbacks: The reporter transcribes the colloquy and objection verbatim. If the parties subsequently stipulate or the court orders that specific pages be stricken or sealed, the reporter follows the precise written directive of the court, removing the pages from public volumes and archiving them under seal.

---

In Camera Proceedings & Sealed Transcripts

When testimony involves matters such as trade secrets, national security, or protected personal information, the court may hold proceedings in camera or order part of the transcript sealed. (Grand jury proceedings are separately kept secret under FRCrP 6(e).)

+-----------------------------------------------------------------------------------------+
|                        Separation of Public vs. Sealed Transcripts                      |
+-----------------------------------------------------------------------------------------+
|  VOLUME I: PUBLIC PROCEEDING                                                            |
|  Line 1 to Line 180: Open court testimony, jury instructions, public motions             |
|  Page 45: [WHEREUPON, PROCEEDINGS CONTINUED IN CAMERA UNDER SEAL, TRANSCRIBED IN VOL II]|
|  Line 181 to Line 350: Resumption of open court testimony                               |
+-----------------------------------------------------------------------------------------+
|  VOLUME II: CONFIDENTIAL - PROCEEDING HELD UNDER SEAL                                   |
|  Separate Title Page: "VOLUME II - IN CAMERA BENCH CONFERENCE - FILED UNDER SEAL"       |
|  Line 1 to Line 85: Highly sensitive trade secret or grand jury testimony               |
|  Distribution: Only as the sealing order permits                                        |
+-----------------------------------------------------------------------------------------+

Mechanics of Creating Sealed Transcripts

When the court orders a sealed session, follow the order and any local rules. A typical approach:

1. Clearing the Courtroom / Pausing Feeds: The judge decides who must leave the room. The reporter pauses realtime and remote feeds to anyone not authorized to receive the sealed portion.
2. Separate Volumes: Sealed testimony is kept out of the public transcript, commonly by producing two documents:
   • Volume I (Public Record): Contains all open court testimony. At the point where in camera proceedings commenced, the reporter inserts a standardized parenthetical note: [Whereupon, in camera proceedings were held under seal, transcribed in separate Volume II.] When open proceedings resume, a corresponding note is inserted: [Whereupon, open court proceedings were resumed.]
   • Volume II (Sealed Record): Contains the complete verbatim record of the in camera colloquy. It features its own independent title page, appearance page, and continuous page numbering.
3. Sealed Transcript Cover Legend: The title page of the sealed volume carries whatever legend the order or local rule requires, for example:
   • CONFIDENTIAL - PROCEEDING HELD UNDER SEAL
   • FILED PURSUANT TO PROTECTIVE ORDER DATED [DATE]
   • NOT TO BE DISCLOSED EXCEPT AS PERMITTED BY COURT ORDER
4. Restricted Distribution: Deliver sealed volumes only to the people and by the methods the order allows (for example, filing under seal, sealed envelopes to chambers, or a restricted encrypted portal), and never post them to shared repositories.