ICO issues guidance on document disclosure

The Information Commissioner’s Office has published guidance on disclosing documents securely and avoiding the risk of a data breach when making information available to the public.

From public authorities handling Freedom of Information requests to organisations responding to subject access requests, many need to regularly disclose documents containing large amounts of information into the public domain. The ICO warns that personal information can be hidden or not immediately visible in documents and, if not checked properly, may cause unintended details to be disclosed.

The ICO guidance includes practical steps and how-to videos to help organisations understand how to check documents, including spreadsheets, for hidden personal information and reduce the risk of a data breach. Emily Keaney, deputy commissioner at the ICO, said: “We have seen a number of serious data breaches, including at the Police Service of Northern Ireland and the Ministry of Defence, which have involved documents being disclosed without proper checks for hidden personal information – this crucial step cannot be missed.

“All organisations must have robust measures in place to protect the personal information they hold and prevent it from being inadvertently disclosed. We are committed to providing clear guidance to help organisations get this right, reducing the margin for mistakes and making it second nature to check documents for hidden personal information.”



Share Story:

YOU MIGHT ALSO LIKE


Resilience Rooted in Reality
In this podcast, CIR speaks to CLDigital’s Tejas Katwala about why organisations must move beyond checklist compliance to build living, data driven resilience. He explains how rethinking governance, risk and compliance, breaking down silos and focusing on value streams can create sustainable, real time resilience that is rooted in the way businesses actually operate today.

Building cyber resilience in a complex threat landscape
Cyber threats are evolving faster than ever. This episode explores how organisations can strengthen defences, embed resilience, and navigate regulatory and human challenges in an increasingly complex digital environment.