Recommendation 17

Where government manages disclosure after a period of operational secrecy in a case involving credible risk to life, it should treat disclosure and notification as a safeguarding intervention. Break- glass arrangements should be tested in advance and designed around the needs of affected people. They should include, as a minimum: clear and timely communications; specific information on the nature of the data compromised, as far as can safely be disclosed; tailored guidance reflecting different levels of risk and location; accessible multilingual support channels; routes for case-specific enquiries; and a coordinated cross-government plan for follow-up assistance. (Recommendation, Paragraph 162) Part Three: Longer-term consequences