CIPP/US Study Guide
Chapter 13: Privacy Issues in Civil Litigation and Government Investigations

Public Court Records, Protective Orders, and Required Redaction

U.S. courts are traditionally open, but online records ended practical obscurity. Litigants use protective orders (FRCP 26(c), three-part test) and HIPAA qualified protective orders. FRCP 5.2 (2007) requires attorneys to redact SSNs, financial accounts, birth years, and minors' names from filings.

The United States has a strong tradition of public access to records (federal FOIA, state open-records laws) and open courtrooms. Putting court records online ended Practical obscurity - the difficulty and expense that had effectively shielded paper records - raising identity-fraud risk (as when bankruptcy courts proposed posting SSNs and account numbers in 2000).

A Protective order (FRCP 26(c)) lets a judge decide what stays confidential and how (e.g. "attorney's eyes only"). The moving party must show good cause; courts apply a three-part test: (1) the resisting party shows the information is confidential, (2) the requesting party shows it is relevant and necessary, (3) the court weighs the harm of disclosure against the need. HIPAA's Qualified protective order (QPO) applies in state courts and bars non-litigation use plus requires return or destruction of PHI.

FRCP 5.2 (2007) - maximum personal information allowed in civil filings
Data elementWhat may remain
Social Security / taxpayer ID numberLast four digits only
Date of birthYear of birth only
Minor's nameInitials only
Financial account numberLast four digits only
Criminal filings add a fifth

Federal Criminal Rule 49.1 and Bankruptcy Rule 9037 mirror Rule 5.2. In criminal proceedings a fifth category applies: only the city and state of a home address may appear, not the precise address.

Key terms - quick answers

What is “Practical obscurity”?
The protection paper records enjoyed because they were expensive and difficult to search; online searchable records greatly reduced it.
What is “Protective order (FRCP 26(c))”?
A court order limiting disclosure of confidential information in litigation, granted on a showing of good cause under a three-part test.
What is “Qualified protective order (QPO)”?
A HIPAA order, used in state courts outside the Federal Rules, that bars using PHI outside the litigation and requires its return or destruction at the end.
What is “Redaction”?
Identifying and removing or blocking information from documents produced in discovery or filed as evidence.