Skip to main content
WHISTLEBLOWING-MANAGEMENT5 MIN READ

Make confidentiality a control, not a courtesy

Apply privacy-risk thinking to reduce reporter re-identification risk during case handling.

The move: protect the person, not just the name. A whistleblowing file can identify someone through indirect details. A rare certification, a unique complaint history, a timestamp, or a phrase only one person uses can narrow the field. If case handlers focus only on deleting names, they miss the actual privacy risk. Use a confidentiality control check before sharing any case detail. Ask: who needs this information to take the next step? Can the question be asked in a less identifying way? Is the original wording necessary? Does the attachment contain metadata? Could the sequence of interviews reveal the source?…

Read the full lesson

Sign up free — one personalized lesson every day, matched to your role and goals.

Already have an account? Sign in

← Back to library
Contact us