The Importance of Discretion in Private Investigations

Discretion in private investigation is not simply about remaining unnoticed; it is the controlled handling of people, information, evidence and communication so that an investigation achieves a legitimate purpose without creating unnecessary exposure. A discreet investigation protects the client, the subject, third parties and the evidential value of the work.

At Trojan Investigations, we treat discretion as a case-management discipline. It starts before any enquiry is accepted, continues through research and evidence gathering, and remains important when reports, photographs, personal data and conclusions are delivered to the client.

Originally published: 26th March 2024  |  Updated: 7th September 2026

Discretion Is Broader Than Secrecy

Clients often use the words “discreet” and “confidential” interchangeably. They are related, but they are not identical. Confidentiality is about controlling disclosure of information. Discretion is wider: it also covers how an investigator communicates, what enquiries are made, how much personal data is collected, how visible an operation becomes and whether unnecessary people are drawn into the case.

An investigation can fail even if no formal confidential document is leaked. A careless telephone call, an overly broad witness approach, an obvious enquiry at a workplace or an unnecessary request for personal information can alert the subject or create avoidable privacy harm.

Why Discretion Matters to Clients

Discretion Begins With the Instruction

Before investigative work starts, a professional investigator should understand who the client is, what they want to establish and why. A request that sounds routine can carry a very different risk profile depending on the surrounding circumstances.

For example, locating a witness for legitimate proceedings is different from locating an estranged person who has deliberately hidden their address for safety. Monitoring an employee on a defined fraud allegation is different from an employer wanting unrestricted observation simply because it is technically possible.

Data Minimisation Is a Core Part of Discretion

Current ICO guidance emphasises that personal data should be adequate, relevant and limited to what is necessary for the purpose. In practice, that means an investigator should not collect every available detail about a person “just in case” it becomes useful later.

A focused investigation is often stronger than an enormous file of irrelevant personal information. It is easier to verify, easier to explain and less likely to expose unrelated people. If an individual or address is ruled out, unnecessary information about them should not simply remain in the case file indefinitely.

Lawful Basis and Proportionality Matter

Where UK GDPR applies, an investigator needs a lawful basis for processing personal information. The ICO’s legitimate-interests guidance, updated in March 2026, sets out a three-part approach: identify the legitimate interest, show the processing is necessary and balance that purpose against the individual’s rights and freedoms.

That does not mean every private investigation automatically qualifies. A commercial or individual interest can be legitimate, but the method still needs to be necessary and proportionate. If a materially less intrusive route can answer the question, that is relevant to the assessment.

Secure Communication Protects Both Client and Evidence

Discretion includes agreeing how updates will be sent and who may receive them. Sensitive case information should not be casually forwarded to a shared workplace inbox, family group or an unauthorised third party. The same principle applies to photographs, location information, witness details and draft findings.

At the beginning of a case we can establish the appropriate contact person, preferred channel and any practical communication restrictions. That reduces the chance of accidental disclosure and helps keep a clear audit trail.

Need-to-Know Access Inside the Investigation

Not every investigator, administrator or external specialist needs access to every part of a case. Access should reflect the work being performed. Where a specialist is instructed, the material shared should be limited to what they need to complete that task.

This principle is especially important where a case involves health information, allegations of criminal conduct, children, family conflict, commercial secrets or other sensitive material.

Discretion During Surveillance

Surveillance may form part of a legitimate investigation, but it should be driven by a defined evidential question rather than an open-ended desire to watch someone. Our surveillance services are planned around scope, necessity, expected evidential value and stop criteria.

Repeated following or watching can also become relevant to harassment or stalking law depending on the facts. The Crown Prosecution Service lists following, monitoring, loitering and watching or spying among behaviours that can form part of stalking when the wider legal test is met. That is one reason professional surveillance cannot be reduced to “it happened in public, therefore anything is allowed”.

Third Parties Deserve Protection Too

An investigation about one person can easily capture information about colleagues, neighbours, children, relatives or members of the public. Good evidence management distinguishes what is relevant from what is incidental.

If a photograph shows several unrelated people, the report should focus on the person or event that matters. If a witness provides information outside the scope, that material should not automatically become part of the investigation simply because it was offered.

Discretion in Business and Legal Investigations

Corporate cases can involve trade secrets, employee data, whistleblowing, suspected fraud, procurement information and internal communications. Premature disclosure can interfere with an internal process or allow relevant material to disappear.

Where the instruction may support proceedings, our legal and litigation support can be scoped around the evidential issue identified by the client or their solicitor, with clear records of what was obtained, from where and when.

Discretion Does Not Mean Concealing Uncomfortable Facts

A professional report should not be edited to make the client’s theory look stronger. If the evidence does not support an allegation, that is a valid investigative outcome. If there are significant limitations, they should be stated.

Accuracy Is Part of Confidentiality

Discretion is not only about who sees information; it is also about avoiding unnecessary harm from inaccurate information. A mistaken address link, outdated business association or unverified allegation can be damaging even if it is shared with only one client.

Investigators should therefore distinguish current facts from historic records, allegations from findings and identification from similarity. Where the evidence is uncertain, the report should preserve that uncertainty rather than converting it into a definite statement.

Special-Category and Criminal-Offence Data Need Additional Care

Investigations can touch health information, political or religious beliefs, sexual life, biometric data or alleged criminal conduct. These categories can attract additional data-protection conditions and a higher risk of harm if mishandled.

The fact that a client wants the information is not enough. The investigator should assess whether it is genuinely necessary, whether there is an appropriate legal condition for processing it and whether access and retention controls reflect its sensitivity.

Redaction Can Protect Irrelevant Third Parties

A useful report does not have to reproduce every item exactly as collected. Where appropriate, copies supplied to a client or third party can minimise unrelated names, contact details or other personal information while preserving the material fact.

Any redaction should be transparent and should not alter the meaning of the evidence. Where an original needs to be preserved for evidential reasons, it can be retained securely while a minimised working copy is used for routine reporting.

Subject-Access and Disclosure Issues Should Be Anticipated

Personal data held during an investigation can sometimes become the subject of access requests, legal disclosure or court directions. Whether information must be provided depends on the applicable law, exemptions and context, but investigators should not assume that a covert file is permanently invisible to the person it concerns.

Good case notes make later decisions easier because they record the purpose of collection, source, relevance and reason for retention.

Discretion Includes Saying No

Some of the strongest evidence of professionalism is a refusal. An investigator should decline instructions that appear designed to facilitate stalking, revenge, unlawful access, intimidation or disclosure of protected personal information without a legitimate basis.

That protects not only the subject but also the client, who may otherwise be encouraged into conduct that creates civil, criminal or reputational consequences.

Retention: Sensitive Information Should Not Be Kept Forever

The ICO’s storage-limitation principle requires organisations to justify how long personal data is kept. Investigation files may sometimes need to be retained for a defined legal, contractual or evidential reason, but indefinite retention “just in case” is not a sound default.

Retention should reflect the purpose, any ongoing proceedings, contractual requirements, legal advice and the need to preserve an evidential record. Once information is no longer needed, secure deletion or other appropriate disposal should follow the relevant policy.

When Confidential Information May Still Need to Be Disclosed

No legitimate investigator should promise absolute secrecy in every circumstance. Disclosure may be required by law, a valid court order, data-protection rights, safeguarding obligations or another lawful process. A client should understand that professional confidentiality operates within the law.

Where a disclosure request arises, the correct response depends on its legal basis and the material involved. Legal advice may be appropriate before sensitive material is released.

Discretion in Personal and Family Cases

Relationship, family and tracing cases often carry high emotional stakes. The investigator should avoid becoming part of the conflict. We do not ask children to gather evidence against a parent, encourage clients to access private accounts or use investigative work to pressure someone who has asked for no contact.

Where the concern involves immediate danger, stalking, domestic abuse or safeguarding, police or specialist services may be the appropriate first response.

How We Build Discretion Into the Case Workflow

What Clients Should Expect From a Discreet Investigator