Introduction
Any type of communication (letters, emails and electronic documents) that include types of personal or commercial data needs to be marked accordingly.
What information will need to be marked?
If a document, data set or email contains any of the following types of information it needs to be marked:
- personally identifies a customer, including internal customers, and will have damaging consequences to the customer, the council or a partner organisation of the council if disclosed inappropriately or lost
- is financially or legally sensitive and will have damaging consequences to the council, a customer of the council or a partner organisation of the council if disclosed inappropriately or lost.
What is damaging consequences?
What should be classified as ‘damaging consequences’ is dependent on the judgment of individual services.
Below is a list of some examples of what could be classed as ‘damaging consequences’:
- significant negative press coverage
- significant financial damage, including from legal proceedings
- likelihood of placing vulnerable people at risk
- significant damage to commercial relationships.
Remember, the vast majority of council documents will not need to be protectively marked. Marking should be used as an exception and for only the most sensitive information.
How do I mark my information?
Official-sensitive
The protective marking of ‘OFFICIAL-SENSITIVE’ must be used for all sensitive emails as well as internal documents. This mark must be carried at the top and bottom of the document in the header and footer.
Letters - Page 2 onwards
If a letter containing confidential information has more than one page, the first page and each following page must be marked ‘OFFICIAL-SENSITIVE’ in the header and footer of the document.
Other documents
Any document containing personal or commercial data, including completed forms, records or reports must be marked ‘OFFICIAL-SENSITIVE’ in the header and footer of the document.