Confidentiality in Private Investigations: The Discipline of Silence

Confidentiality is not a quality one asserts; it is a set of practical decisions taken before, during and after an enquiry. It is measured by what was never collected, what was never sent, and what was deleted at the right moment.

In a private investigation, secrecy has two objects. It protects the client, whose initiative may reveal a strategy, a concern or a live conflict. It also protects the people concerned, who are not parties to the mandate and whose private lives should not become available material.

Minimise before collecting

The first confidentiality decision is a decision about scope. Collecting broadly, just in case, turns a file into a reservoir of information whose use and justification nobody controls any longer. Minimisation is not an administrative constraint imposed from outside: it is what makes confidentiality sustainable over time.

In practice, every item retained must answer a simple question: which question in the mandate does this item address? If it answers none, it should not be kept, even if it is accurate, even if it is interesting, even if it might be useful later. That discipline costs a little comfort and saves a great deal of risk.

Minimisation has a useful side effect: it forces the mandate question to be stated precisely. A file that does not know what it is looking for collects everything and ends up proving nothing solid. A well-posed question reduces the volume of data needed, and with it the surface of exposure.

Control access, not just files

A confidential file open to an entire team is no longer confidential. The working rule is short: one file, one responsible person, a named list of readers, reviewed at each stage of the mandate. Access shared for convenience is the first cause of leaks, well ahead of dramatic intrusions.

Segregation applies to media as well. Printed documents left in view, exchanges over consumer messaging apps, reports stored on a personal drive: each of those practices creates a copy that escapes the firm’s control. Banning such channels without offering a workable alternative only produces workarounds.

A dedicated channel is not a technical luxury. It shows who received what, on which date, and it closes access when the mandate ends. That traceability serves confidentiality as much as it constrains it: it makes the claim verifiable.

Access control does not stop at files: it covers the channels through which information travels. Email is the most convenient channel and the least discreet. Subject lines, attachments, blind copies and forwarded threads form a parallel archive that nobody truly controls. A file can remain confidential in substance and leak through its metadata.

A few rules usually suffice: no proper names in subject lines, no sensitive attachment in clear, a dedicated channel for mandate correspondence, and a verbal briefing rather than a written thread when the exchange concerns hypotheses or identifiable individuals.

Retain, then delete

Retention answers to two opposing logics. The client wants a record of what was ordered and paid for; the person concerned has an interest in the data not surviving indefinitely. The answer lies in a duration fixed when the mandate is agreed, and in a clear distinction between the report, the supporting documents and the working notes.

Deletion must be real: files, backups, messaging systems, mobile devices. A destruction clause that covers only the main folder leaves the essentials in place, often in a contributor’s inbox or in an automatic backup nobody remembers.

It is therefore useful to distinguish three levels at signature: the final report, retained according to the client’s needs; the supporting documents, kept for a defined period and a defined use; and the working notes, which are not meant to outlive delivery. That hierarchy prevents late arguments and retention by default.

What confidentiality does not protect

Obligations of secrecy do not cover everything. They do not allow an unlawful method to be concealed, or information to be withheld from an authority legally entitled to it, or the production of material in proceedings to be resisted for long. Believing otherwise leads to expensive disappointments, usually at the moment the credibility of the file matters most.

Nor is confidentiality anonymity. A report meant to be used must be attributable, dated and owned by the person who produced it. A document its author refuses to acknowledge has no value, whatever the quality of its content.

Discretion as a method

Reduced to essentials, confidentiality is a form of restraint. Few people informed, few copies, few channels, a retention period that is owned rather than assumed. What does not exist cannot leak, and what was never written down cannot one day be produced before a third party.

That discipline starts at the first exchange and shows up in material details: who answers the telephone, which name appears on the mandate, which email address receives the documents. An initial confidential consultation settles those arrangements before any work begins. It commits you to nothing. These pages are editorial information and do not constitute legal advice.