Module Learning Objective

reduce unnecessary identification risk

1. Regulatory Concept & Core Standards

Today we will learn to reduce unnecessary identification risk. Throughout the video, consider the difference between knowing a rule and applying it to a decision. We will work through an example, identify a possible failure and develop a response that can be used at work. Trust depends on identity protection and appropriate handling of pressure. Anonymity differs from confidentiality. Estonian law prohibits specified direct or indirect work-related harm connected with reporting, including threats and attempts.

Section 14 protects the fact of reporting and conditions identity disclosure. Names may leak through subjects, filenames, exports and notifications. Forwarding the whole file is often unnecessary for one question. Copies need the same protection.

Apply the following rule: Do not promise a general TÕRTKS duty to investigate anonymous reports. Section 14 protects the confidentiality of the fact of reporting and requires written consent for identity disclosure, with criminal-procedure specifics. Explain actual communication capabilities and technical-data processing. Confidentiality does not mean that nobody knows the identity.

2. Practical Implementation & Procedure

Define each recipient’s necessary information. Prepare lawful limited working copies while protecting the original. Check metadata and subjects. Record exceptional disclosures and their legal grounds. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

A manager requests statistics but receives a named case list. The corrected report aggregates results and omits identifying small-group details while the file remains restricted. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: Does removing one name column make the whole report safe? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

Not necessarily. Combined details can identify people. Assess content, need and whether aggregation sufficiently reduces the risk.

One mistake to avoid is: protecting only the explicit name field.

Now apply the national rule to a second decision. The form requires a name and identity-document copy while advertising anonymity. What should change?

Identify actual functionality and necessary data. Explain anonymity versus confidentiality and TÕRTKS scope. Do not request documents merely for technical convenience. Correct the form and public information together and lawfully address excessive data already collected.

National Legal Framework: Rikkumisest teavitaja kaitse seadus, transposing Directive (EU) 2019/1937 of the European Parliament and of the Council on the protection of persons who report breaches of Union law.