CONFIDENTIALITY & INFORMATION HANDLING

Discretion governs whether information is shared. Confidentiality governs how information is handled once access is granted.

WFO holds information concerning family members, Capital, ownership, enterprises, intellectual property, professional advice, banking and transactions, relationships, security and institutional affairs.

Some of that information supports public understanding. Some supports a defined professional or Governance Purpose. Some remains closely held because broader circulation creates unnecessary personal, financial, commercial, legal or security vulnerability.

WFO therefore governs information according to Purpose, Authority, sensitivity and the legitimate requirements of the recipient.

Confidentiality is not secrecy. It protects legitimate information and relationships; it does not conceal unlawful conduct, override a legal obligation or prevent properly authorised scrutiny.

THE ORIGIN OF THE DISCIPLINE

WFO’s confidentiality framework is informed in part by disciplines familiar from the United Kingdom’s protection of official information, including the Official Secrets Act 1989 and associated security practice.

Those disciplines include:

an authorised Purpose;
access limited to those with a legitimate requirement;
personal responsibility for information received;
controlled onward disclosure;
appropriate handling throughout the information lifecycle;
and prompt action following loss, compromise or unauthorised disclosure.

WFO adopts those principles because they provide clarity and reinforce individual responsibility.

No HM Government security classification or statutory status is claimed or implied.

WFO is a private family office. Its information-handling framework operates through applicable law, Governance, professional duties, contractual obligations, express undertakings and proportionate private-sector security practice.

PURPOSE AND ACCESS

Access follows Purpose.

Before non-public information is disclosed, WFO identifies the recipient, the professional or institutional capacity in which that person acts, the reason for access and the information relevant to the Decision Requirement.

A senior title, family relationship, professional appointment or previous access does not create a continuing entitlement to all information.

Access remains proportionate to the legitimate Purpose. Information is not disclosed merely because it is available, potentially interesting or convenient to provide.

The recipient remains personally responsible for information received and for compliance with the applicable legal, contractual, professional and WFO handling requirements.

WFO INFORMATION-HANDLING LABELS

WFO uses four private handling labels where a clear handling distinction is required.

PUBLIC

Information approved for unrestricted public access.

Publication does not remove the need to preserve accuracy, Provenance, version and Time-State. Materially inaccurate or obsolete public information is corrected through the appropriate channel.

WFO CONTROLLED

Non-public information used for a legitimate family, Office, corporate, professional or transaction Purpose.

Access is limited to appropriate recipients. Storage, transmission, copying, retention and onward disclosure remain subject to the Purpose for which access is granted.

WFO RESTRICTED

Information requiring heightened protection because unauthorised access, alteration, loss or disclosure presents material personal, financial, legal, commercial, reputational or security Risk.

Access is deliberately limited. Handling arrangements reflect the sensitivity of the information, the recipient, the environment and the consequences of compromise.

RECIPIENTS ONLY

Information confined to the identified individuals or professional capacities stated by the disclosure.

The recipient does not forward, reproduce, summarise or disclose the information beyond that group without express Authority or another lawful basis.

These are WFO administrative handling labels. They are not UK Government security classifications and do not imitate or confer governmental status.

INFORMATION THROUGHOUT ITS LIFECYCLE

Information handling begins when material is created or received and continues through its use, storage, transmission, reproduction, review, retention, return, archival preservation or authorised destruction.

The applicable treatment reflects:

the ownership and Provenance of the information;
the Purpose for which it is held;
the Authority under which it is used;
its sensitivity and materiality;
the people and systems with access;
contractual, professional and legal obligations;
retention and evidential requirements;
and the consequences of loss, alteration or unauthorised disclosure.

Classification does not replace judgement. A document marked PUBLIC remains subject to accuracy and Authority controls. An unmarked document does not become unrestricted merely because a label is absent.

ONWARD DISCLOSURE

Access for one Purpose does not authorise use for another.

Information disclosed for legal advice, banking diligence, valuation, tax, investment analysis, Governance or another defined Purpose remains subject to the limits of that engagement.

Onward disclosure requires an appropriate legal, contractual or expressly authorised basis. Where disclosure is required by law, court order, regulatory obligation or applicable professional duty, it proceeds through the proper channel and remains limited to the lawful requirement.

A confidentiality obligation does not authorise destruction, concealment, misrepresentation, obstruction of lawful scrutiny or suppression of information that a person is legally required to disclose.

PROFESSIONAL RESPONSIBILITY

Professional advisers retain responsibility for their own confidentiality, privilege, data-protection, regulatory and information-security obligations.

WFO coordination does not dilute those duties or transfer them to the Office.

Confidentiality and legal professional privilege are distinct. A WFO handling label does not create privilege. Privilege depends upon the applicable law, the nature and Purpose of the communication and the capacities in which the relevant people act.

Similarly, confidentiality does not establish ownership of information or intellectual property. Those rights remain governed by the applicable law, contract, licence, mandate or other Definitive Documentation.

PERSONAL INFORMATION

Personal information receives treatment appropriate to its nature, Purpose and Risk.

WFO distinguishes the wider duty of confidentiality from the specific legal requirements governing personal data.

Personal information is processed upon an identified lawful basis and remains subject to Purpose limitation, data minimisation, accuracy, appropriate retention, security and Accountability.

Particular care attaches to financial, identity, health, family, safeguarding, security and other sensitive personal information.

LOSS OR COMPROMISE

The no-surprises principle applies to information security.

Loss, misdirection, unauthorised access, unintended disclosure, suspected compromise or material alteration is reported promptly through the appropriate channel.

Early reporting supports containment, preservation of Evidence, assessment of consequences, fulfilment of legal or contractual notification requirements and orderly correction of the record.

Prompt reporting is treated as responsible conduct. Concealment or avoidable delay compounds the original failure and threatens confidence in the person, process or institution concerned.

CONFIDENTIALITY UNDERTAKINGS

The public framework explains WFO’s general expectations. It does not itself create the complete contractual terms applicable to every relationship.

Where WFO publishes an illustrative confidentiality undertaking, that document demonstrates the expected structure and standard. It is not automatically the executed instrument governing every engagement.

The applicable non-disclosure agreement, engagement letter, contract, professional duty, mandate or other Definitive Documentation governs according to its terms.

A recipient therefore relies upon the instrument executed or otherwise applicable to the actual circumstances rather than assuming that a public illustration has contractual effect.

EVIDENCE AND CONTROLLED DILIGENCE

Confidentiality does not prevent legitimate professional verification.

WFO provides relevant information through the Diligence Request Protocol once the recipient, Purpose, Authority and appropriate degree of protection are established.

The depth of disclosure reflects the Decision Requirement. Public material is used where sufficient. Controlled Evidence follows where the legitimate Purpose requires it.

Access to information does not constitute endorsement, approval, Authority, ownership or permission to use the WFO or family name.

ASSURANCE WITHOUT VULNERABILITY

WFO makes the existence of disciplined information handling visible without publishing the sensitive mechanics of its protective arrangements.

The public record explains:

the governing principles;
the handling labels;
the relationship between Purpose, access and responsibility;
the controlled-diligence route;
and the response expected following compromise.

Private records retain detailed access arrangements, security architecture, authentication methods, personal-protection information, recipient lists, contractual terms, incident records and other sensitive operating material.

The existence of protection is visible. Its vulnerable mechanics remain protected.

Confidentiality protects legitimate Purpose by governing access, use and disclosure. It does not convert secrecy into legitimacy.