How should Forbes approach investigative reporting with sensitive data?

• A. Publish all data publicly without review.
• B. Use secure data handling, verify sources, minimize risk to subjects, and obtain consent where possible; document chain of custody.
• C. Trust anonymous tips without verification.
• D. Ignore consent in sensitive data cases.

Answer: (B)

Handling sensitive data in investigative reporting requires a disciplined, ethical framework that protects people while preserving credibility. The best approach starts with secure data handling: use encryption, strong access controls, and secure storage, plus an auditable trail of who accessed or changed the data. Verifying sources and corroborating information through multiple independent checks is essential to prevent misinformation and build trust. Minimizing risk to subjects means redacting identifying details when possible, considering the potential harms of publication, and publishing only what is necessary to tell the story. Obtaining consent where possible respects privacy and rights, and it helps ensure you’re using information in an appropriate, lawful way. Documenting the chain of custody—who obtained the data, how it was obtained, how it was processed, and how it was transmitted—demonstrates the integrity of the data and the reporting process. This combination of secure handling, verification, harm reduction, consent when feasible, and transparent data provenance is what sustains responsible, credible investigative work.