What not to put where.
WHAT COUNTS AS CONFIDENTIAL
Customer data Commercial terms Personal information about staff Unannounced plans Legal matters
WHAT TO ASSUME ABOUT ANYTHING WRITTEN
That it may be forwarded, disclosed or published.
WHAT THAT IMPLIES
Write nothing you could not defend.
WHAT TO BE CAREFUL WITH
Forwarding chains containing internal discussion Copying people into sensitive threads Attachments containing more than intended
WHY ATTACHMENTS SPECIFICALLY
Spreadsheets contain hidden rows and other sheets.
WHAT TO DO
Check the whole file before sending.
WHAT TO NEVER SEND BY UNPROTECTED CHANNELS
Credentials Identity documents Complete customer records
WHAT TO USE INSTEAD
A secure transfer route.
WHAT TO MARK
Documents that are confidential.
WHY
It sets expectations and supports enforcement.
WHAT TO CHECK BEFORE REPLYING TO ALL
Who is on the thread, including external addresses.
WHAT TO DO ABOUT LEGAL MATTERS
Route them to whoever handles them.
WHY
Written comment on legal matters can create exposure.
WHAT TO AVOID
Speculating in writing about causes, liability or fault.
WHY
It is discoverable and it is quoted.
WHAT TO DO IF SOMETHING IS SENT IN ERROR
Report it immediately.
