1. Core Concepts and Legal Context

This video's topic is selecting relevant information and documents. By the end, you should be able to choose useful attachments without disclosing excessive information. We will connect the information available, the criterion guiding the decision and the action that must be recorded. Follow the case and compare your answer with the proposed response. This course takes the perspective of someone who wants to report a concern. The demonstration uses a fictional channel. You do not need legal terminology to describe facts. You need to distinguish what you know, what you suspect and what you cannot confirm.

An attachment should help explain or verify the account. An indiscriminate collection of documents can expose third parties and hinder assessment. Whistleblower protection does not authorise obtaining information by means that constitute a criminal offence. You do not need to break into accounts, take documents without authority or investigate colleagues to submit a report.

Apply the following rule: Retention must meet necessity and proportionality principles, GDPR requirements and procedural needs. The Act does not generally authorise indefinite retention of all attachments. Set reviews and document disputes that justify retention.

2. Practical Application and National Rule

Select documents you accessed lawfully and explain how each relates to the facts. Preserve the original and do not change its contents to strengthen the account. If unrelated data must be redacted from a copy, clearly mark the redactions without destroying the original. Remember that filenames and metadata can reveal identity. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

A spreadsheet contains the relevant transaction and personal data about dozens of unrelated customers. The person describes the document and seeks a secure way to provide only what is needed, identifying any redactions. They do not publish the entire sheet in a messaging group to ask for opinions. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

3. Case Study and Key Decision Points

The exercise is as follows: Is it better to send every available file or select those that help verify the facts? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

Select relevant files and explain their connection to the account. If unsure how to handle sensitive information, describe it and ask for guidance through the channel. A missing attachment does not automatically prevent reporting well-founded facts.

One mistake to avoid is: altering an original document or disclosing third-party data unnecessarily.

Now apply the national rule to a second decision. The system deletes every case five years after receipt, regardless of the country and any pending proceedings. Is that appropriate?

No. Identify the local rule, starting event and any limits or extensions. A uniform schedule may delete records too early or retain them too long. Document the decision by category, include copies and define who reviews a suspension of deletion, rather than keeping everything indefinitely.

Remember these three points. First: Select relevant attachments. Second: Preserve integrity. Third: Consider personal data and metadata.

To apply this learning, retrieve the procedure used in your organisation or consider how you would create it. Identify one difference between that procedure and the case we have just resolved. Write down the change you would propose and the information needed to justify it. You can complete this short task in the handout accompanying the video.

The expected outcome of this unit is the ability to choose useful attachments without disclosing excessive information. Review the explained answer whenever you are unsure and keep the summary to support a future decision.

In the worksheet, connect your proposal to this video's national rule. Identify the document or platform field that would need to change and who should approve the change. If you conclude that it is good practice, explain the risk you intend to reduce. If you conclude that there is a legal duty, record its source and scope.

National Legal Framework: Protected Disclosures (Amendment) Act 2022, transposing Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law.