Defensible disclosure
What makes a disclosure defensible.
A disclosure is defensible when you can answer four questions, with evidence, long after it went out.
The four questions
01 · Discover
Did you find everything you should have?
Record where you searched, what you found, and why the search stopped where it did. For subject access, the ICO says you must be able to show why a search is unreasonable or disproportionate.
02 · Decide
Was each decision lawful, and who made it?
Every withholding decision needs a legal basis and a named decision-maker, recorded when the decision is made rather than reconstructed afterwards.
03 · Act
Is the withheld information actually gone?
A box drawn over text can be lifted. Redactions have to be burned into the file, and the released copy checked against what you decided.
04 · Prove
Can you prove it years later?
The record has to be assembled as the work happens, in a form that shows whether it has been altered.
What the rules say
- ICO, right of access guidance: you “must be able to show why a search is unreasonable or disproportionate”.
- Attorney General's Guidelines on Disclosure (2024), Annex A: search tools using “unambiguous calculations” are acceptable, and the search strategy is shared through the Disclosure Management Document.
- Government response to the independent review of disclosure (July 2026): AI in disclosure must be “auditable, evidence based and capable of effective scrutiny”.
Where AI fits
Detection proposes; people decide. In Smartbox no generative model decides what is withheld, and the same input always gives the same result, so every decision can be explained and reproduced.
Not ready for a demo?
Get the Gen 2 briefing.
A short overview of what Gen 2 does and how it would work for your obligations.
