Confidential Information Policy

Confidential information is a valuable business asset. It may include commercial, technical, operational or proprietary information, such as business plans, contract negotiations, internal documents, business methods, customer databases, research, patents, formulae and trade secrets.

This Confidential Information Policy helps businesses set rules for access to, and use of, confidential information by employees and others working on their behalf.

Internal rules for protecting confidential business information

The policy is designed to apply to employees, agents, contractors and other third parties working for the business.

It sets out practical obligations for protecting confidential information, including:

• not using confidential information without appropriate authorisation;
• not disclosing confidential information without authorisation; and
• not discussing or displaying confidential information in public or in front of visitors.

Defining confidential information clearly

The policy includes a short-form definition of “confidential information”, designed to cover a broad range of information without being overly prescriptive.

In some cases, it may be preferable to replace this with details of the specific types of confidential information held by the business.

The definition also makes clear that simply labelling information as “confidential” will not make it confidential if it does not have the necessary quality of confidence required by law.

Personal data, data protection and whistleblowing

Confidential information may include personal data. Because personal data is subject to its own legal framework, including the UK GDPR and Data Protection Act 2018, this policy cross-refers to a separate Data Protection Policy rather than attempting to cover data protection in full.

The policy also makes clear that it is not intended to prevent any communication or action protected by whistleblowing legislation. An optional reference to a Whistleblowing Policy is included.

Accidental disclosure, monitoring and policy breaches

The policy also addresses confidentiality agreements, accidental or inadvertent disclosure, monitoring, breach of the policy, policy review and implementation.

Confidential Information Policy is part of Business . Just £38.50 + VAT provides unlimited downloads from Business for 1 year.