Any communication between the Collector and third parties where sensitive information may be discussed or transferred should take place through encrypted channels. Using secure and encrypted messaging channels helps to ensure that unauthorised third parties cannot monitor or interfere with the Collector’s communication with authorised third parties. Use of such channels prevents leakages of the collected audio data or of any identifying information of personnel or the individuals with whom the Collector is in contact.
Tech Specs & Resources
Examples of encrypted communication tools are Signal, Vitru, Wire, or ProtonMail.
The Collector should consider the purpose of the encrypted tool, for example whether it is for communication alone or also for the transfer of data. It may be the case that an encrypted messaging tool is suitable for communication, but if used for data transfer would strip the metadata or otherwise undermine the data’s integrity (e.g., via compression).
Legal Framework
See section 4.2.4.B on ‘Data Protection Measures’ under the GDPR.
Applicable Ethical Principles Do No Harm.