distinguish urgent risks from ordinary handling
1. Regulatory Concept & Core Standards
This video's topic is identifying urgency and preserving material. By the end, you should be able to distinguish urgent risks from ordinary handling. We will connect the information available, the criterion guiding the decision and the action that must be recorded. Follow the case and compare your answer with the proposed response. Initial classification helps choose a procedure and prevents unjustified delay. One event can engage several regimes. Assessment may change with new information. Referral does not authorise unrestricted sharing.
Urgency may involve people’s safety, disappearing evidence or ongoing harm. The channel does not replace emergency services. Preservation still requires powers and privacy compliance; urgency does not mean unlimited access.
Apply the following rule: Reports can go to competent authorities or through the contact point and specified organisations. Since 1 March 2026 KNAB is the contact point. It advises, refers, supervises compliance and examines cases where no competent institution can be determined. It does not replace every sector authority’s powers. Internal reporting is encouraged only under section 5(4); public disclosure has separate section 4 conditions.
2. Practical Implementation & Procedure
Assess danger and timing. Involve the competent person or authority. Preserve relevant material lawfully and record reasons. Separate protection from final guilt findings and review measures when risk changes. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.
3. Case Study & Compliance Action
Relevant logs will be deleted tomorrow. The team checks powers and suspends the specific deletion under a documented process. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.
The exercise is as follows: Does urgency permit unlimited copying of every database? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.
No. Use necessary scope and proper authority. Urgent preservation and harm reduction still require reasons.
One mistake to avoid is: removing privacy limits because of urgency.
Now apply the national rule to a second decision. The team treats KNAB as the only investigator for every sector. What needs clarification?
KNAB has performed contact-point functions since March 2026, but the competent institution examines the particular breach. The contact point helps identify it and also examines statutory cases where competence cannot be determined. Check the current official route. A private software provider does not become a competent public authority.