Visible Enough to Verify: A Practical Redaction Routine for Assessor Evidence Packs

Assessment evidence packs tend to grow by accretion. A candidate uploads a witness statement, an employer adds a contact sheet, an assessor attaches an observation note, and a portfolio that began as a record of competence ends up carrying home addresses, mobile numbers, signatures and health details that no verifier needs in order to reach a judgement. The answer is not to strip the pack back until it becomes unverifiable. It is to apply a disciplined redaction routine that keeps the evidence and removes the surplus.

Begin with the verifier's question

Before any redaction takes place, the assessor should ask a simple question: what does the next reader need to see in order to confirm this assessment decision? The next reader may be an internal quality assurer, an external quality assurer, an appeals panel or a candidate exercising a right of access. Their task is to trace the claim, the criteria, the evidence and the judgement. Anything that does not serve that trace should be treated as a candidate for redaction or summarisation.

This is not an argument for concealment. Poor performance, negative witness comments and unresolved actions should remain visible where they bear on the assessment decision. The aim is data minimisation, not reputation management.

Classify before copying

A useful routine starts before the redaction tool is opened. The assessor should classify each item in the pack into one of three groups: retain, redact or summarise.

• Retain where the item is necessary to verify competence, authenticity, date, role, criteria coverage or the assessment decision itself.
• Redact where the item is personal data that adds nothing to that verification, such as a home address, personal email, direct dial number, unnecessary date of birth or unrelated third-party contact details.
• Summarise where the evidential point can be preserved without the underlying detail. A medical diagnosis, for example, may be unnecessary, while a note confirming that a reasonable adjustment was agreed and how it affected the assessment may be essential.

This distinction matters because over-redaction is not a neutral act. If an assessor blacks out the date of an observation, the identity of a witness's role or the wording of feedback, the IQA may be unable to confirm that the evidence is authentic and sufficient. The redacted pack should remain a record of assessment, not merely a record of privacy compliance.

Apply a least-necessary test

For each item marked for redaction, the assessor should apply a least-necessary test. Is the data necessary for the assessment purpose? Is a less intrusive version available? Could a role title replace a name, a summary replace a document, or a candidate reference number replace a full identity? Where a signature is used only to authenticate a record, a typed name, role and date may be sufficient; where the signature itself is the evidence, it may need to remain visible.

Special care is needed with special category data. Health information, disability details, religion, sexual orientation and similar data should not remain in a portfolio simply because it arrived with an email or a witness statement. If an adjustment is relevant, the record should show the adjustment and its effect on the assessment, not the candidate's full medical history.

Keep a redaction log

A redaction that cannot be explained is difficult to distinguish from a gap in the evidence. Every working copy should be accompanied by a redaction log that records the document identifier, page or section, the field redacted, the reason for redaction, the date and the person responsible. The log need not be elaborate, but it should be consistent across the assessment team.

The log also supports the audit trail. If an EQA asks why a witness's contact details are missing, the provider can show that the redaction was deliberate, proportionate and recorded. If a candidate asks why part of their portfolio has been obscured, the log provides the basis for a clear explanation. Version control matters as well: redacted working copies should be clearly named and stored so that they cannot be confused with the original evidence. Where the original is retained, it should be held securely and only for as long as the retention policy allows.

Leave enough visible to verify

The following should normally remain visible in a redacted assessment pack: the candidate's identifier, the assessment criteria, the date and context of the evidence, the assessor's judgement and rationale, feedback linked to the criteria, and any record of adjustments that affected the assessment. Where a third party has provided witness testimony, the witness's role and relationship to the candidate should usually remain, even if their name and contact details are removed.

Redaction should also be visually clear. Opaque blocks without labels can make a pack look incomplete or tampered with. A short note such as 'personal contact details removed' is often better than an unexplained black rectangle, provided the note does not itself disclose sensitive information.

Explain the decision to candidates

Candidates are entitled to understand how their evidence will be handled. A plain-language privacy notice should explain that personal data may be minimised before internal or external verification, that redaction is not a comment on the candidate's credibility, and that the original evidence will be retained only where there is a lawful and necessary reason to do so.

Where a candidate objects to a redaction, the assessor should record the representation and consider whether a summary or alternative evidence can preserve the point without disclosing unnecessary personal data. Transparency does not require disclosing third-party data, but it does require a reasoned response.

Make redaction a routine, not an emergency

The most defensible approach is to build redaction into the normal preparation of every portfolio. A short checklist, a standard log and a second-reader check before the pack goes to IQA will prevent ad hoc decisions. Assessors should also review a sample of redacted packs periodically to check that the routine is being applied consistently and that the evidence remains verifiable.

Data protection and assessment quality are not opposing objectives. A well-redacted pack demonstrates both: it respects the candidate and third parties, and it gives the verifier exactly what is needed to see that the judgement stands up.