Confidentiality in aviation SMS is how much personal information is included in available safety reports and concerns. When safety issues are reported, employees may or may not have access to details about the reported issue. When employees do have access, or when you release information about a reported issue, you will need to decide if employees can see information like:
For example, you may send an email regarding details about a reported issue to your company, and remove all names from the issue details. However, if the issue details contain information about a type of vehicle that only one person in your organization operates, then you have essentially singled that person out (and the fact that you removed their name didn’t matter).
Confidentiality in SMS is something that should take a stance on and, if applicable, create a policy that you can adhere to. When you structure your company’s stance and confidentiality, you should consider:
To structure your stance on confidentiality, you need to consider factors that affect confidentiality in SMS.
Several factors affect how you should structure confidentiality in your aviation safety management system. Answers to the following questions will help you gauge how you should structure confidentiality:
In short, different organizations will have different needs for confidential information in SMS. Some aviation service providers will have a high degree of confidentiality, while others will have a low amount of confidentiality.
It can be a good practice to structure confidentiality around the severity of risk assessment.
The size of your organization can greatly affect confidentiality in your SMS.
In smaller aviation service provider organizations, people know each other and people talk. If something happens, almost everyone is likely to know about it. There is a different mentality about confidentiality and transparency in such organizations.
In larger organizations, you need to more carefully consider confidentiality. Things will happen that other employees won’t know about, and people involved in the safety incident may not want others to know about (such as in medium-high risk issues). In such a case, you need to have a confidentiality policy that states how much information is released in certain situations.
Existing culture around privacy, retaliation, and teamwork can also greatly affect confidentiality in your SMS. In mature aviation safety cultures, you have flexibility with your stance on confidentiality.
In mature safety cultures, employees are likely to:
In negative safety cultures, employees may do the following if confidential information is included in safety reports available to employees:
Before committing to a confidentiality policy, make sure to assess your safety culture.
Physical access to information will also affect how you take a stance on safety. If you have rigid controls in place regarding information access, then you don’t need to worry as much about sanitizing safety reports.
For example, if you have aviation safety management software that naturally filters reports based on your user role in the company, then only people who should have access will have access to information.
If you are a company that is using Excel spreadsheets or Google sheets, you have much less control over information access and should be sure to take steps to sanitize reports heavily, depending on your approach to confidentiality.
Your stance on confidentiality should align with your transparency goals. If you have opted to have a low degree of transparency, then you should have a stance on confidentiality that is more conservative.
Having a liberal stance on confidentiality (i.e., you don’t sanitize safety reports) but a high level of transparency, then you are likely to run into trouble because you have a conflict of interest with confidentiality and transparency.
There is probably some information in your SMS that you don’t want aviation SMS auditors to see. This information is confidential in the sense that it is an organizational secret.
There can be many reasons why you don’t want auditors to see such information, but the point is you need to ensure that such information is kept safe from the auditor’s eyes. You might document this information separately from your normal SMS documentation (in the case of paper/spreadsheet-based SMS), or flag certain reports as being hidden from auditors (in the case of aviation SMS software).
Confidentiality and Industry Type
Finally, the last thing you need to consider for confidentiality is what industry you are in.
You simply need to carefully consider the needs of your company works with and ensure that your confidentiality values align and service those with whom you work.
Last updated May 2024.