Distinguishing anonymity from confidentiality

1. Regulatory Concept & Core Standards

In this video we will work through a concrete decision: explain who may know the reporting person’s identity. The aim is to explain the criterion used and apply it to a workplace situation. We will start with the concept, move to the procedure and finish with a case to solve. Trust depends on identity protection and appropriate handling of pressure. Anonymity differs from confidentiality. Estonian law prohibits specified direct or indirect work-related harm connected with reporting, including threats and attempts.

With an anonymous report, the recipient does not know identity, although indirect detail may reveal it. With confidential handling, designated people may know identity and must protect it. TÕRTKS does not create a general duty to investigate anonymous reports. Promises must reflect reality.

Apply the following rule: Do not promise a general TÕRTKS duty to investigate anonymous reports. Section 14 protects the confidentiality of the fact of reporting and requires written consent for identity disclosure, with criminal-procedure specifics. Explain actual communication capabilities and technical-data processing. Confidentiality does not mean that nobody knows the identity.

2. Practical Implementation & Procedure

Describe identification, logs and communication. Explain recipients and limitations. Do not claim anonymity when identifying data are mandatory and review attachments too. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

An unnamed account describes a meeting attended only by the reporting person and one other individual. The handler recognises identification risk and restricts sharing. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: Does an absent name prevent identification? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

No. Event, role or attachment details can identify someone. Assess the whole account and explain actual possibilities and limits.

One mistake to avoid is: promising anonymity without checking actual data.

Now apply the national rule to a second decision. The form requires a name and identity-document copy while advertising anonymity. What should change?

Identify actual functionality and necessary data. Explain anonymity versus confidentiality and TÕRTKS scope. Do not request documents merely for technical convenience. Correct the form and public information together and lawfully address excessive data already collected.