7 Bodycam redaction mistakes that put agencies at risk of a data breach in 2026
Body-worn cameras have become an important source of evidence for US law enforcement agencies, but the recordings they produce can contain far more information than an investigation actually requires. A single video may show victims, witnesses, children, bystanders, license plates, home interiors, computer screens, medical information, and other identifying details.
Redaction is therefore an important part of preparing bodycam footage for disclosure. Yet redacting a recording incorrectly can create its own risks. A missed face, an easily removable overlay, an unsecured working copy, or an inappropriate third-party workflow can expose sensitive information even when an agency believed the footage had been protected.
In 2026, those risks need to be considered alongside the security requirements surrounding criminal justice information. The FBI's CJIS Security Policy addresses areas including access control, audit and accountability, media protection, incident response, and cryptographic protection, making secure handling relevant throughout the evidence lifecycle rather than only when a final video is released.
1. Assuming a redaction is permanent when it is not
One of the most serious mistakes is treating a visual overlay as though it has permanently removed the underlying information.
Simply placing a black box over a face, license plate, document, or computer screen does not necessarily mean the original pixels have been destroyed. Depending on the software and export process, the underlying image may remain embedded in the file and could potentially be recovered or revealed.
A properly prepared disclosure copy should contain genuinely redacted visual information rather than a reversible annotation sitting on top of the original footage. Agencies should test their export process and verify that sensitive areas remain obscured after the file is rendered, saved, transferred, and opened in an independent media player.
The original evidence should also remain preserved separately. Redaction should normally happen to a working or disclosure copy so that the agency does not compromise the evidentiary source.
2. Redacting the obvious faces and missing everything else
A bodycam recording can contain many forms of personally identifying information. Focusing exclusively on faces can leave significant privacy gaps.
For example, an officer may enter a home where paperwork containing names and addresses is visible in the background. A vehicle's license plate may remain visible through a window, while a person's medical information may appear on a screen or document. Children may also appear unexpectedly during an incident.
Agencies should establish a redaction review that considers the entire frame rather than simply asking whether every face has been covered.
Depending on the circumstances, reviewers may need to look for:
Faces of witnesses, victims, and bystanders
Children's faces
License plates
Addresses and house numbers
Identification cards and documents
Computer and phone screens
Medical or financial information
Personal correspondence
Sensitive information spoken or displayed during an incident
This is particularly important when footage is released outside the agency. A disclosure decision should consider what information the recipient actually needs rather than assuming that every visible detail is appropriate to share.
3. Failing to track moving subjects throughout the recording
Redacting one frame is not the same as redacting a person throughout a video.
Bodycam footage is constantly moving. An individual can walk toward and away from the camera, disappear behind an object, reappear later, change position, or briefly leave the frame. Manual editing can therefore become difficult when a recording contains multiple people and hours of footage.
A reviewer who checks only obvious sections can accidentally leave a person's identity visible later in the recording. The problem becomes even more difficult when several subjects appear at different times.
Automated detection and tracking can reduce the amount of repetitive work involved, but automation should not be treated as an excuse to skip quality assurance. Pimloc's Secure Redact can automatically detect and track sensitive visual content across video, giving agencies a way to process large recordings while still allowing human reviewers to check the resulting disclosure copy.
The objective is not simply to make redaction faster. It is to create a repeatable workflow in which the same categories of sensitive information are considered throughout the entire recording.
4. Keeping too many unsecured copies
A redacted video can create additional copies of sensitive evidence, particularly when several people are involved in preparing a disclosure.
An investigator might export the original recording, create a working copy, send it to another employee for review, download a revised version, and then save the final disclosure file to another location. If those copies are not controlled, an agency can lose track of where sensitive footage exists.
CJIS guidance places significant emphasis on protecting media containing CJI and controlling access during storage and transport. The FBI also addresses encryption, accountability, media protection, and destruction as components of protecting criminal justice information.
Agencies should therefore know:
Where original recordings are stored
Where working copies are created
Who can access each version
Which files are approved for disclosure
When temporary copies should be deleted
How media is sanitized or destroyed
Whether transfers are appropriately protected
The fewer unnecessary copies an organization creates, the easier it becomes to maintain control over the evidence.
5. Sending footage through insecure workflows
A carefully redacted video can still become a privacy problem if it is subsequently sent through an insecure channel.
Email attachments, consumer file-sharing services, personal storage accounts, removable drives, or unapproved messaging applications can create additional exposure. The risk is not limited to whether the recipient is trustworthy; agencies also need to consider how the file is protected during transmission and where it remains afterward.
The FBI's CJIS guidance specifically addresses protection of CJI during transport and requires appropriate safeguards for digital and physical media. Current CJIS materials also address encryption for CJI in transit outside physically secure locations.
Agencies should establish approved methods for transferring disclosure copies and make those procedures easy for personnel to follow. A secure process should also account for what happens when a recipient downloads the footage rather than treating the transfer itself as the end of the security lifecycle.
6. Assuming automated redaction never needs human review
Automation can dramatically reduce the time required to process bodycam recordings, but no detection system should be treated as infallible.
Video quality varies considerably. Poor lighting, motion blur, occlusion, unusual camera angles, reflections, crowded scenes, and rapidly moving subjects can all affect automated detection. A face that is clearly visible for one moment may become partially obscured in the next.
Human review should therefore remain part of the disclosure workflow. Reviewers can examine whether sensitive information was consistently covered, whether important evidence was accidentally obscured, and whether the final file behaves as expected after export.
Automation is most useful when it takes over repetitive detection and tracking while people retain responsibility for final decisions. This combination can be considerably more practical than expecting investigators to manually inspect every frame without technological assistance.
7. Treating redaction as a separate task from evidence security
Perhaps the biggest mistake is thinking about redaction as a final editing job rather than part of evidence management.
The security of bodycam footage depends on what happens from the moment a recording is uploaded through collection, storage, examination, redaction, review, transfer, and eventual disposal. A secure redaction workflow therefore needs to fit into the agency's broader evidence environment.
That includes evaluating the software and infrastructure used to process the footage. Agencies should understand where recordings are processed, how access is controlled, what audit information is available, how data is encrypted, and what happens to files after processing.
Our team at Pimloc designed Secure Redact to support this broader approach. Our software provides automated video redaction capabilities without requiring investigators to manually obscure every occurrence of a sensitive subject. The important consideration is how the technology fits within the agency's existing security controls, policies, retention practices, and CJIS responsibilities rather than treating redaction software as a standalone compliance solution.
The FBI describes the CJIS Security Policy as a shared responsibility for the lawful use and appropriate protection of criminal justice information.
Build a safer bodycam disclosure workflow
Avoiding redaction mistakes starts with recognizing that privacy protection and evidence integrity are connected.
An agency should preserve the original recording, work from controlled copies, establish clear categories of information requiring review, use appropriate technology for large-scale processing, and require a final quality check before disclosure. Staff should also understand how to handle failed redactions, unexpected sensitive information, and suspected security incidents.
A useful workflow might look like this:
Upload → Preserve → Detect → Redact → Review → Validate → Approve → Disclose → Retain or Dispose
Each stage should have a defined owner and appropriate security controls. Access should be limited to authorized personnel, and the agency should be able to determine which version was ultimately approved for release.
Current CJIS guidance also makes clear that security extends beyond the software itself. The FBI's cloud guidance, for example, raises questions around encryption, incident response, contractor responsibilities, audit access, logging, and media protection when CJI is processed by cloud providers.
That makes vendor assessment an important part of a modern bodycam redaction strategy. Agencies should understand not only whether a tool can find and obscure a face, but also how the surrounding system protects the evidence being processed.
What should agencies check before releasing bodycam footage?
Before a disclosure copy leaves the agency, reviewers should confirm that the recording is actually ready for its intended audience.
A final checklist could include:
Has the original evidence been preserved?
Has the correct working copy been used?
Have faces and other sensitive information been reviewed?
Have moving subjects been tracked throughout the footage?
Have background details been checked?
Has the redacted file been independently opened and tested?
Are there any recoverable or reversible overlays?
Has a qualified person completed the final review?
Is the recipient authorized to receive the footage?
Is the transfer method approved and appropriately secured?
Have unnecessary temporary copies been removed?
This final stage is especially important because redaction errors are not always obvious to the person who created the file. A second review can catch problems that the original editor has become accustomed to overlooking.
Frequently asked questions
-
It can, depending on what the recording contains and how it is handled. Agencies should classify information according to applicable CJIS requirements and their own policies rather than assuming every recording has the same security status.
-
Not necessarily. A recording can contain other identifying information, including license plates, documents, addresses, screens, and voices, depending on the circumstances.
-
Generally, the original should be preserved separately from the redacted disclosure copy. This maintains access to the source material for investigative or legal purposes.
-
No. Automated tools can help detect and track sensitive content, but human review remains important for identifying missed detections and confirming that relevant evidence has not been unnecessarily obscured.
-
A controlled workflow with defined storage locations, permissions, processing stages, and deletion procedures can help limit unnecessary copies. Staff should use approved systems rather than creating ad hoc downloads or transfers.
-
No. CJIS compliance involves a broader set of administrative, technical, physical, and operational safeguards. Redaction is one part of the evidence lifecycle and should be assessed alongside access control, encryption, logging, media protection, and incident response.
-
The agency should follow its established incident response procedures immediately, preserve relevant records, restrict further access where possible, and notify the appropriate security and supervisory personnel. The precise response will depend on the information involved and applicable requirements.
-
Agencies should review procedures regularly and whenever technology, disclosure practices, security requirements, or applicable law changes. Periodic testing can also reveal weaknesses that are not apparent during routine use.