How to Redact Phone Numbers from a WhatsApp Chat PDF

When you share a WhatsApp chat with a solicitor, an HR department, or as a court exhibit, you are almost certainly sharing more personal data than necessary. Phone numbers, email addresses, and financial details belonging to third parties may appear throughout the conversation. Automatically redacting that data before sharing is both a practical precaution and, in many jurisdictions, a legal obligation.

Why You Might Need to Redact Phone Numbers

Legal submissions and court exhibits are often accessible to multiple parties - opposing counsel, tribunal members, and sometimes the public. Including unredacted phone numbers belonging to individuals who are not party to the proceedings can expose you to complaints or, in regulated industries, enforcement action. Many employment tribunal practice directions specifically require parties to redact personal data of individuals whose details are not relevant to the issues in dispute.

HR complaints present a similar challenge. A chat submitted as evidence in a disciplinary process may contain the personal contact details of colleagues, customers, or family members who have nothing to do with the allegation. Redacting those details before handing the document to HR or an investigator protects those third parties and reduces your organisation's data-processing footprint. GDPR Article 5 requires that personal data be adequate, relevant, and limited to what is necessary - sharing an unredacted chat rarely satisfies that test.

What Data Can Be Automatically Redacted

WaChat to PDF's redaction engine scans the full text of every message and applies pattern-matching rules to identify and replace common categories of personal data. The engine works on the processed message content before any PDF page is rendered, so no sensitive values leak into the output file even as invisible text.

• Phone numbers - local and international formats including +44, +1, and common regional patterns
• Email addresses - any address in standard user@domain format
• Credit card numbers - 13–19 digit sequences matching card number patterns
• National ID numbers - formats including UK National Insurance numbers, US Social Security numbers, and common EU identifier formats
• Bank account details - sort codes, IBANs, and account number patterns

Each matched value is replaced with the token [REDACTED] in the PDF output. The surrounding message text, timestamp, sender name, and formatting are preserved exactly as they appeared in the original chat.

Step-by-Step: Redacting a WhatsApp Chat PDF

1. Export your WhatsApp chat from your phone as a .zip or .txt file.
2. Upload the file at the WaChat to PDF upload page.
3. Proceed through the conversion flow to the Customize step.
4. Enable the PII Redaction toggle.
5. Select which data types you want to redact - phone numbers, emails, card numbers, IDs, or bank details.
6. Click Generate PDF and download your redacted document.

Redaction vs Deletion - What's the Difference?

Deletion removes a message or value entirely, leaving a gap in the conversation record. Redaction replaces the sensitive value with a visible placeholder - [REDACTED] - while keeping everything else in the message intact. Courts and legal professionals generally prefer redaction over deletion because the presence of the placeholder shows that something existed there and was deliberately withheld, whereas deletion can look like tampering.

Redaction also preserves the conversational flow. If someone shared a phone number midway through a discussion, the redacted version still shows that a number was shared at that point in time, even though the actual digits are hidden. That context can be important when the sequence of messages matters to the legal argument being made.

When Courts Require Redaction

Civil procedure rules in the UK, US, and most EU jurisdictions require parties to redact irrelevant personal data before filing documents as court exhibits. In practice this means: if a third party's phone number or email appears in a chat and that person is not a witness or party, their contact details should be redacted before the exhibit is filed. Failure to do so can prompt objections from opposing counsel and, in some courts, result in the document being returned for re-filing.

Employment tribunals in England and Wales follow the Employment Tribunal Rules of Procedure, which give tribunals broad powers to order redaction of documents containing personal data not relevant to the proceedings. Proactively redacting before submission demonstrates to the tribunal that you are handling the data responsibly.

GDPR and Redaction Obligations for Businesses

Under GDPR Article 5(1)(c), personal data must be adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed - the data minimisation principle. When a business submits a WhatsApp chat as evidence in legal proceedings, the submission constitutes a new processing activity. Including personal data of third parties that is not relevant to the proceedings likely breaches that principle.

Businesses also have obligations when responding to Subject Access Requests under GDPR Article 15. If a chat record is included in an SAR response, the personal data of other individuals in the chat must be redacted before disclosure unless those individuals have consented or another lawful basis applies. Automated redaction tools significantly reduce the manual effort involved in meeting that obligation across large volumes of messages.