Training staff and volunteers prior to a major campaign requires emphasis on privacy and confidentiality above all. While professional teams may discuss moves management and stewardship behind closed doors, confidentiality beyond the boardroom is paramount. In military circles in intelligence, few personnel are cleared to 'top secret'. Major campaigns are no different. We are the custodians of people's time, talent and treasure. We each have a duty of care, to observe confidentiality and to set that example, across the organisation.

Clarity on who manages the relationship is important as is how you manage donor data. Excel spreadsheets are one of the worst and most leaky ways to manage donor data but it is still widely used which leads to multiple versions of spreadsheets on random computers. Get away from storing data on desktops; move to an encrypted CRM and control access and data entry.

Donor confidentiality is fundamental to the credibility of any fundraising initiative. To ensure data security, advanced encryption, strict access control, and compliance with regulations such as GDPR are implemented. Transparent privacy policies provide donors with full clarity on how their data is used. Regular audits and ongoing training for responsible teams enhance protection and mitigate risks. Integrity in data management builds trust and encourages engagement in meaningful causes.

Respect the wishes of my donor to remain anonymous if that the donor’s choice. Mission-driven and donor centric fundraising leads to success.

- One thing I have found helpful is continuous setting security controls. - Ensure only authorised personnel who have need for such information have access to it. - Encourage staff to password protect their devices. - Be cybersecurity conscious so their systems are not hacked by clicking on phishing links. - As much as possible, information should be properly kept. - Confidentiality should be upheld by personnel.

Desde o muito douto Abade Trithemius pelo menos existem muitas maneiras de se comunicar que somente quem "aprendeu" consegue decifrar ou registrar. Informações mais sensíveis devem ter uma forma de registrar que algo ou alguma quantia passou de doadores para a campanha de arrecadação. Deve ter também a data que isso foi feito. Para registro, isso é útil. Nomes podem mudar, e podem ser adaptados. Agora, o bom senso diz que deve-se evitar colocar nome completo e dados pessoais de doadores em bancos de dado cuja capacidade criptográfica seja baixa. Isso serve tanto para uma criptografia "humana" quanto para uma "tecnológica". Ambas devem ser levadas em consideração para assegurar o sigilo.

*"Garantizar la confidencialidad de los donantes es fundamental en cualquier campaña de recaudación de fondos. Para lograrlo, es clave implementar medidas como el uso de plataformas seguras de pago, el cifrado de datos y el cumplimiento de normativas como el GDPR o la Ley de Protección de Datos aplicable. Además, la transparencia y la comunicación clara con los donantes sobre cómo se manejará su información refuerzan la confianza y fomentan relaciones a largo plazo. La seguridad no es solo una obligación legal, sino un compromiso ético con quienes apoyan nuestra causa. #Transparencia #Confianza #ProtecciónDeDatos"