CERNOVANCE / EXPERTISE
Information handling & confidentiality
Agree what information is needed, who may access it and how it is used and handed over. These are matters to establish for an engagement, not a substitute for its data processing and confidentiality terms.
Initial discussions: describe the problem
Begin with the problem, current work and desired change. Full customer lists, patient information, employee files or system credentials are not needed. Agree purpose and scope before additional material is requested.
Before sharing: agree responsibilities
Establish authority to share, purpose and necessity, then agree confidentiality, access, external suppliers and environment. Personal information, cross-border handling and sector-specific data require a further assessment of applicable requirements.
During delivery: use only what is needed
Define the minimum necessary information, considering aggregation or de-identification. Agree data scope, processing conditions and authorisation before using third-party models, cloud or tools. Raw client material is not public demonstration content.
At completion or termination: agree handover
Agree output and data handover, retention, return or deletion, access revocation and required records. Arrangements must reflect contracts, applicable law and technical conditions rather than unverified promises of immediate deletion or absolute security.
Public references: seek separate permission
Confirm permission and disclosure scope separately before publishing client names, logos, testimonials, screenshots or data. Distinguish personal prior experience from firm engagements and do not use unauthorised material as endorsement.