Redaction Shown
Where the organisation redacts information from the copy, the response shows that something has been redacted.
Intent
A redaction the person cannot see is indistinguishable from data the organisation never held. Showing that something was removed is what makes the rest of this domain assessable.
How to test it
An assessor scores the criterion against a single response:
- Score 2
- Every redaction is visible in the copy, so the person can see where information was removed.
- Score 1
- The response says that material was redacted without showing where.
- Score 0
- Information was removed from the copy with nothing to show it.
- Not applicable
- The organisation redacted nothing from the copy.
The law it reflects
This criterion reflects Article 5(2) of the UK GDPR. That mapping is a guide, not a legal test: conformance is judged against the criterion, not the article.
See H3 in context in the full standard.