No Result
View All Result
SUBSCRIBE | NO FEES, NO PAYWALLS
MANAGE MY SUBSCRIPTION
NEWSLETTER
Corporate Compliance Insights
  • Home
  • About
    • About CCI
    • Writing for CCI
    • NEW: CCI Press – Book Publishing
    • Advertise With Us
  • Explore Topics
    • See All Articles
    • Compliance
    • Ethics
    • Risk
    • FCPA
    • Governance
    • Fraud
    • Internal Audit
    • HR Compliance
    • Cybersecurity
    • Data Privacy
    • Financial Services
    • Well-Being at Work
    • Leadership and Career
    • Opinion
  • Vendor News
  • Career Connection
  • Events
    • Calendar
    • Submit an Event
  • Library
    • Whitepapers & Reports
    • eBooks
    • CCI Press & Compliance Bookshelf
  • Podcasts
  • Videos
  • Subscribe
  • Home
  • About
    • About CCI
    • Writing for CCI
    • NEW: CCI Press – Book Publishing
    • Advertise With Us
  • Explore Topics
    • See All Articles
    • Compliance
    • Ethics
    • Risk
    • FCPA
    • Governance
    • Fraud
    • Internal Audit
    • HR Compliance
    • Cybersecurity
    • Data Privacy
    • Financial Services
    • Well-Being at Work
    • Leadership and Career
    • Opinion
  • Vendor News
  • Career Connection
  • Events
    • Calendar
    • Submit an Event
  • Library
    • Whitepapers & Reports
    • eBooks
    • CCI Press & Compliance Bookshelf
  • Podcasts
  • Videos
  • Subscribe
No Result
View All Result
Corporate Compliance Insights
Home Ethics

Coffee-Shop Talk…Making Confidential Information Public

by Marcy J. Maslov
September 3, 2014
in Ethics
Coffee-Shop Talk…Making Confidential Information Public

You overheard a teammate divulging confidential information about a client to a friend at the coffee shop. This information is potentially damaging to the client. What would you do in this situation, and what is your obligation to the client?  -e-Factor!® scenario

I was delivering a continuing professional education workshop on ethics recently and this scenario came up for discussion.  It generated a heated debate between those who felt they had absolutely zero responsibility in this case and those who believed the client had a right to know that confidential information had possibly been made public.

Protecting confidential and proprietary information is a big deal for most companies. Many people are unaware this common situation creates ethical dilemmas and potential conflicts. People fail to connect coffee shop talk with confidentiality requirements. So let’s explore this scenario in more detail to determine the potential ethical issues, solutions and consequences.

First, what makes this situation an ethical dilemma?  Is it that confidential information is being revealed?  Or is it because this is happening in a public place?  Maybe, however, the true dilemma is that we’ve overheard something and now we have knowledge of something we feel is not right. We may think it’s not our place, we don’t have authority or it’s not our business because the teammate doesn’t work for us directly.  At a very high level, though, could we say each of us has an obligation to protect the organization and clients we work for?  Our immediate answer to this may depend on our experience level and position with the company.  We don’t all think the same, and we don’t have the same interpretation of what is confidential. We may need to start our analysis by clearly defining what we consider to be confidential and making sure everyone in our organization understands this definition.

Let’s peel away another layer of the dilemma and look at stakeholders.  The biggest stakeholder is the client whose information is being made public.  Yes, I said “being made public.”  In the accounting world, the American Institute Code of Professional Conduct specifically identifies actions like this, posting on social media and even answering questions from trade association surveys as actions that could be construed as being made public.  Especially if the information provided has enough detail that we could reasonably tie it back to a specific organization. Once information is made public, it is no longer protected by the rules of confidentiality. Have you ever tried recalling a post on social media?

The other stakeholders here are the talking teammate and us. The teammate who is talking clearly is violating obligations to protect client confidentiality. But why are we stakeholders in this? We’re just overhearing something being said! We’re not directly involved, are we?  Well, our organization is also a stakeholder, one that may be held responsible for damage to the client if it is significant and can be reasonably proven. Ah, so now we see why our role as “witness” may have some responsibility attached to it…

It’s true that people talk.  It’s also true we may have policies and procedures that prohibit this sort of situation from occurring – on paper.  However, if we don’t enforce this policy consistently it may also be true that we’re at risk. So what choices do we have in terms of taking action in this specific situation? How can we prove we’re enforcing our confidentiality policies?  And what are the consequences of each option?

For starters, we can ignore it, pretending we heard nothing. This is the safest and easiest way for us.  However, if a problem occurs as a result of this coffee shop talk, doing nothing is just as bad as doing the talking!  We had a chance to prevent further damage, and we didn’t take it because we didn’t want to be involved…!

We can talk to the teammate privately right in the moment and suggest they stop talking about clients in public places.  There’s a way to do this politely and professionally and yes, nicely. They truly may not know their conversation could cause trouble, and we’re giving them an opportunity to choose their actions and be accountable. For me, how a person responds here shows whether or not they are trustworthy, but it’s also a matter of how we communicate – accusatory wording will bring out a defensive attitude no matter how noble our intentions are, right?

We can always report this to the organization’s compliance officer or the teammate’s direct supervisor.  This is a more serious step requiring proof and details, not just gossip. It documents the incident and is protection for us and for the company.  It shows that we are enforcing our policy, so if this is our biggest concern, we’ve answered it. It could also damage our relationship with the teammate and affect our perceived credibility.

And finally, we can talk to the client directly and let them know what happened. This is an extreme option, possibly destroying trust between client and our organization and leading up to a loss of the client, lawsuits or other consequences. Does the client have a right to know? This is the question needing an answer to justify this action.

These are just a few choices we have coming off the top of my head.  I’m sure you can think of more.  So what action should we take now?  We all have to choose… What’s your decision?


Previous Post

Convercent Appoints Three Senior Executives, Strengthening Management Team of Fast-Growth GRC Leader

Next Post

What’s Holding Back the Internal Audit Transformation? Internal Audit’s Technology Performance Gap

Marcy J. Maslov

Marcy J. Maslov

After watching companies and clients struggle with ethical dilemmas, Marcy J. Maslov invented e-Factor!®, a business ethics board game designed to provide a practice arena for solving real-life ethical dilemmas before they cost time, money or reputation. Marcy is founder and CEO of Empowerment Unlimited Coaching, LLC, a business coaching practice devoted to building strong, ethical leaders and entrepreneurs. She has extensive Fortune 500 and entrepreneurial background including implementation of Sarbanes-Oxley programs, creation of corporate ethics courses, forensic accounting and public speaking on business ethics. Marcy has lived or worked in over 20 countries, including France, Mexico and Canada. She is a Certified Professional Coactive Coach, has earned a BS in Accountancy (U of IL Champaign-Urbana) and MBA (Duke University ‘92). Contact Marcy at marcy@e-Factorgame.com or www.e-Factorgame.com.

Related Posts

encompass update

Encompass Launches pKYC Maturity Model

by Corporate Compliance Insights
March 22, 2023

KYC automation platform Encompass has unveiled a new perpetual Know Your Customer (pKYC) maturity model designed to help banks improve...

consilio onna partnership

Consilio, Onna Seek to Streamline eDiscovery for Cloud Apps

by Corporate Compliance Insights
March 22, 2023

Legal technology provider Consilio has launched a new platform, Sightline Collect, powered by data management supplier Onna. The platform is...

corlytics solidatus partnership

Corlytics, Solidatus Join Forces

by Corporate Compliance Insights
March 22, 2023

Data management provider Solidatus and regulatory risk intelligence supplier Corlytics recently announced a partnership that is expected to give both...

castle pixel art

Building a Defense-in-Depth Culture to Combat Phishing

by Perry Carpenter
March 22, 2023

Phishing attempts are only growing more sophisticated by the day, and effective cybersecurity means defending all the vectors of attack,...

Next Post
What’s Holding Back the Internal Audit Transformation? Internal Audit’s Technology Performance Gap

What's Holding Back the Internal Audit Transformation? Internal Audit's Technology Performance Gap

Compliance Job Interview Q&A

Jump to a Topic

AML Anti-Bribery Anti-Corruption Artificial Intelligence (AI) Automation Banking Board of Directors Board Risk Oversight Business Continuity Planning California Consumer Privacy Act (CCPA) Code of Conduct Communications Management Corporate Culture COVID-19 Cryptocurrency Culture of Ethics Cybercrime Cyber Risk Data Analytics Data Breach Data Governance DOJ Download Due Diligence Enterprise Risk Management (ERM) ESG FCPA Enforcement Actions Financial Crime Financial Crimes Enforcement Network (FinCEN) GDPR HIPAA Know Your Customer (KYC) Machine Learning Monitoring RegTech Reputation Risk Risk Assessment SEC Social Media Risk Supply Chain Technology Third Party Risk Management Tone at the Top Training Whistleblowing
No Result
View All Result

Privacy Policy

Founded in 2010, CCI is the web’s premier global independent news source for compliance, ethics, risk and information security. 

Got a news tip? Get in touch. Want a weekly round-up in your inbox? Sign up for free. No subscription fees, no paywalls. 

Follow Us

Browse Topics:

  • CCI Press
  • Compliance
  • Compliance Podcasts
  • Cybersecurity
  • Data Privacy
  • eBooks Published by CCI
  • Ethics
  • FCPA
  • Featured
  • Financial Services
  • Fraud
  • Governance
  • GRC Vendor News
  • HR Compliance
  • Internal Audit
  • Leadership and Career
  • On Demand Webinars
  • Opinion
  • Resource Library
  • Risk
  • Uncategorized
  • Videos
  • Webinars
  • Well-Being
  • Whitepapers

© 2022 Corporate Compliance Insights

No Result
View All Result
  • Home
  • About
    • About CCI
    • Writing for CCI
    • NEW: CCI Press – Book Publishing
    • Advertise With Us
  • Explore Topics
    • See All Articles
    • Compliance
    • Ethics
    • Risk
    • FCPA
    • Governance
    • Fraud
    • Internal Audit
    • HR Compliance
    • Cybersecurity
    • Data Privacy
    • Financial Services
    • Well-Being at Work
    • Leadership and Career
    • Opinion
  • Vendor News
  • Career Connection
  • Events
    • Calendar
    • Submit an Event
  • Library
    • Whitepapers & Reports
    • eBooks
    • CCI Press & Compliance Bookshelf
  • Podcasts
  • Videos
  • Subscribe

© 2022 Corporate Compliance Insights

Welcome to CCI. This site uses cookies. Please click OK to accept. Privacy Policy
Cookie settingsACCEPT
Manage consent

Privacy Overview

This website uses cookies to improve your experience while you navigate through the website. Out of these, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may affect your browsing experience.
Necessary
Always Enabled
Necessary cookies are absolutely essential for the website to function properly. These cookies ensure basic functionalities and security features of the website, anonymously.
CookieDurationDescription
cookielawinfo-checbox-analytics11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checbox-functional11 monthsThe cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checbox-others11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-necessary11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-performance11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
viewed_cookie_policy11 monthsThe cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.
Functional
Functional cookies help to perform certain functionalities like sharing the content of the website on social media platforms, collect feedbacks, and other third-party features.
Performance
Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.
Analytics
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics the number of visitors, bounce rate, traffic source, etc.
Advertisement
Advertisement cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies track visitors across websites and collect information to provide customized ads.
Others
Other uncategorized cookies are those that are being analyzed and have not been classified into a category as yet.
SAVE & ACCEPT