Identifying urgency and preserving material

1. Regulatory Concept & Core Standards

This video's topic is identifying urgency and preserving material. By the end, you should be able to prioritise cases by risk and the need for intervention. We will connect the information available, the criterion guiding the decision and the action that must be recorded. Follow the case and compare your answer with the proposed response. Triage selects the appropriate next action without prejudging responsibility. Competence, urgency, evidential quality and conflicts are separate dimensions. Information protection also applies during initial assessment.

Urgency may concern personal safety, continuing breaches or loss of evidence. It differs from confidence in the allegation. ZZPri permits an organised priority approach based on consequences in the internal act.

Apply the following rule: Article 13 permits direct external reporting where the internal route is absent, would be ineffective, or the person believes there is a risk of retaliation. Choose the authority by the subject of the breach. KPK is not the sole authority for every matter; it also provides support and statutory protection functions. Public disclosure has separate article 18 conditions. Advice, statistical reporting and reporting a breach are different services.

2. Practical Implementation & Procedure

Assess impact, imminence, continuation and the risk of information loss. Identify who has authority to act. Record the measure, its reason and planned review. Preservation must be authorised and limited to what is necessary. Emergencies and duties to report to authorities must not depend on the channel's ordinary timetable. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

A report arrives on Thursday and important logs will automatically disappear on Friday. The outcome is unknown, but timely preservation must be assessed. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: Does lower certainty allow the imminent deletion to be ignored? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

No. Urgency and certainty are separate. Preserve relevant material proportionately and then assess substance.

One mistake to avoid is: using the same internal timeline for every case and ignoring imminent harm or information loss.

Now apply the national rule to a second decision. An advice page is listed as the sole recipient of every report. What is missing?

A competence check. Select the authority by the breach and article 13 external-route conditions. KPK has support and other statutory duties but is not the only competent authority. Distinguish advice, reporting and public disclosure.