R7.8
Publication, Privacy, and Harm Safeguards
Material being relevant to an audit does not mean that it may or should be published. Publication is a separate decision with its own rights, risks, and control requirements.
Use
- Complete before public release or disclosure beyond the necessary circle.
- Examine whether the purpose can be achieved with less identifying material.
- Record correction channel, revision trace, and a plan for possible unpublication.
Downloads
Purpose and Grounds for Publication
Set what is to be published, why, and for whom.
Publication purpose
Audience and distribution
Legal, editorial, or institutional basis
Why is publication necessary?
Personal Data and Protection
Map identifying data, sources, and third parties.
Personal data and special categories
Requires privacy assessment
Third parties and indirect identification
Requires privacy assessment
Source protection, confidentiality, and secrecy duties
Requires privacy assessment
Retention, access, deletion, and archive
Requires privacy assessment
Minimisation, Anonymisation, and Harm
Examine whether identification and level of detail are necessary and defensible.
What can be removed or generalised?
Anonymisation and reidentification test
Requires privacy assessment
Possible harm, burden, or misuse
Requires privacy assessment
Proportionality assessment and alternatives
Response, Status, and Correction
Ensure visible document status, opportunity to respond, and controlled change.