ICO publishes new guidance on secure document disclosure to prevent data breaches
The Information Commissioner’s Office (ICO) has published new guidance to help organisations securely disclose documents containing large volumes of information, particularly in response to Freedom of Information (FOI) and Subject Access Requests (SARs). The guidance addresses the risk of inadvertently disclosing hidden personal information—such as metadata, hidden rows, columns, worksheets, and active filters—and includes practical steps, checklists, and how-to videos to support organisations in identifying and removing such data. It also advises on converting documents to simpler formats, avoiding ineffective redaction techniques, and using tools such as Microsoft Document Inspector. The guidance replaces an advisory note issued in 2023 following high-profile breaches and is intended to reduce the risk of accidental disclosures across a range of document-sharing scenarios. The ICO is engaging with key stakeholders, including government bodies, to raise awareness and promote adoption of the guidance.