The Gold Standard of Anthropology | Proxy Record Access Requests, Third-Party Rights and Redacted Disclosure

1. Define the request before searching

Back to contents

Record who is asking, what right or organisational rule is invoked, whose records are sought, the time period and the form requested. Data subject, representative, appointor, proxy holder and researcher roles do not create identical access. Clarify ambiguity while preserving the original wording and agreed scope.

First-principles check: Name the decision, the people or population affected, the evidence needed and the limit that remains. Write the rule before looking at the preferred outcome. Then identify the authority, observation or calculation that could change it. This keeps the method tied to evidence rather than hindsight.

Worked practice: Turn “all proxy information” into a documented search scope. Keep every intermediate step visible. A reader should be able to locate the input, apply the same rule and understand why a different result would follow if one fact changed.

Changed-context transfer: The request comes through an authorised lawyer. Preserve the underlying principle but replace the setting-specific details. State which parts travel, which do not, and which new authority or measurement would be needed.

Evidence record: Request, identity basis, authority, scope, dates and handler. Retain uncertainty and disagreement instead of compressing them into a clean label. The record should let another person reconstruct the decision without relying on the memory or status of the original decision-maker.

Decision-quality drill: Run the practice once under the most favourable plausible assumptions and again under the least favourable plausible assumptions. Compare which conclusion changes, which merely becomes less precise and which survives. If the result depends on an unstated convention, make that convention visible before acting. This is a transfer test: the method should guide a new case, not only explain the example after the answer is known.

Practical verification: Give the case file to a reviewer who did not build the analysis. Ask that person to reproduce the critical step, identify the stopping rule and name the strongest live alternative explanation. Resolve differences by returning to the governing evidence, not by averaging opinions. Record corrections, version the decision and keep a short list of conditions that would require reopening it.

2. Verify identity and representative authority

Back to contents

Use proportionate identity checks matched to sensitivity and delivery channel. When a representative acts, verify both the requester and authority to receive the specified material. Do not reveal whether a sensitive record exists before verification is resolved, and do not retain excessive identity evidence.

First-principles check: Name the decision, the people or population affected, the evidence needed and the limit that remains. Write the rule before looking at the preferred outcome. Then identify the authority, observation or calculation that could change it. This keeps the method tied to evidence rather than hindsight.

Worked practice: Design routes for a portal user and a former member. Keep every intermediate step visible. A reader should be able to locate the input, apply the same rule and understand why a different result would follow if one fact changed.

Changed-context transfer: A former proxy holder asks for an appointor’s instructions. Preserve the underlying principle but replace the setting-specific details. State which parts travel, which do not, and which new authority or measurement would be needed.

Evidence record: Verification method, result, representative instrument, scope and expiry. Retain uncertainty and disagreement instead of compressing them into a clean label. The record should let another person reconstruct the decision without relying on the memory or status of the original decision-maker.

Decision-quality drill: Run the practice once under the most favourable plausible assumptions and again under the least favourable plausible assumptions. Compare which conclusion changes, which merely becomes less precise and which survives. If the result depends on an unstated convention, make that convention visible before acting. This is a transfer test: the method should guide a new case, not only explain the example after the answer is known.

Practical verification: Give the case file to a reviewer who did not build the analysis. Ask that person to reproduce the critical step, identify the stopping rule and name the strongest live alternative explanation. Resolve differences by returning to the governing evidence, not by averaging opinions. Record corrections, version the decision and keep a short list of conditions that would require reopening it.

3. Map systems, copies and custodians

Back to contents

Search appointment forms, email, meeting platforms, validation logs, agenda packs, voting systems and archived disputes. Build the map from the record series, not the easiest application. Names can collide or change, so use identity and event keys and record every excluded system and reason.

First-principles check: Name the decision, the people or population affected, the evidence needed and the limit that remains. Write the rule before looking at the preferred outcome. Then identify the authority, observation or calculation that could change it. This keeps the method tied to evidence rather than hindsight.

Worked practice: Create a search plan for one annual meeting. Keep every intermediate step visible. A reader should be able to locate the input, apply the same rule and understand why a different result would follow if one fact changed.

Changed-context transfer: The record was migrated and lost its legacy identifier. Preserve the underlying principle but replace the setting-specific details. State which parts travel, which do not, and which new authority or measurement would be needed.

Evidence record: Queries, systems, custodians, dates, hits, exclusions and failures. Retain uncertainty and disagreement instead of compressing them into a clean label. The record should let another person reconstruct the decision without relying on the memory or status of the original decision-maker.

Decision-quality drill: Run the practice once under the most favourable plausible assumptions and again under the least favourable plausible assumptions. Compare which conclusion changes, which merely becomes less precise and which survives. If the result depends on an unstated convention, make that convention visible before acting. This is a transfer test: the method should guide a new case, not only explain the example after the answer is known.

Practical verification: Give the case file to a reviewer who did not build the analysis. Ask that person to reproduce the critical step, identify the stopping rule and name the strongest live alternative explanation. Resolve differences by returning to the governing evidence, not by averaging opinions. Record corrections, version the decision and keep a short list of conditions that would require reopening it.

4. Separate personal data from the whole document

Back to contents

A document can mix an appointor’s instructions, a holder’s details, a validator’s opinion and institutional facts. Analyse information at that level rather than treating the whole page as belonging to one person. Preserve context needed to make disclosed data intelligible.

First-principles check: Name the decision, the people or population affected, the evidence needed and the limit that remains. Write the rule before looking at the preferred outcome. Then identify the authority, observation or calculation that could change it. This keeps the method tied to evidence rather than hindsight.

Worked practice: Annotate a mixed proxy form by person and institutional fact. Keep every intermediate step visible. A reader should be able to locate the input, apply the same rule and understand why a different result would follow if one fact changed.

Changed-context transfer: An internal note evaluates both appointor and holder. Preserve the underlying principle but replace the setting-specific details. State which parts travel, which do not, and which new authority or measurement would be needed.

Evidence record: Information map, context decision, interpretation and reviewer. Retain uncertainty and disagreement instead of compressing them into a clean label. The record should let another person reconstruct the decision without relying on the memory or status of the original decision-maker.

Decision-quality drill: Run the practice once under the most favourable plausible assumptions and again under the least favourable plausible assumptions. Compare which conclusion changes, which merely becomes less precise and which survives. If the result depends on an unstated convention, make that convention visible before acting. This is a transfer test: the method should guide a new case, not only explain the example after the answer is known.

Practical verification: Give the case file to a reviewer who did not build the analysis. Ask that person to reproduce the critical step, identify the stopping rule and name the strongest live alternative explanation. Resolve differences by returning to the governing evidence, not by averaging opinions. Record corrections, version the decision and keep a short list of conditions that would require reopening it.

5. Assess third-party information and confidentiality

Back to contents

Consider separability, consent, confidentiality, sensitivity and whether disclosure without consent is reasonable under the governing rule. Instructions, handwriting and event details may identify someone indirectly. The presence of one third-party detail should not become a reason to withhold the requester’s entire record.

First-principles check: Name the decision, the people or population affected, the evidence needed and the limit that remains. Write the rule before looking at the preferred outcome. Then identify the authority, observation or calculation that could change it. This keeps the method tied to evidence rather than hindsight.

Worked practice: Apply the test to an appointment naming an alternate and witnesses. Keep every intermediate step visible. A reader should be able to locate the input, apply the same rule and understand why a different result would follow if one fact changed.

Changed-context transfer: Consent cannot be sought safely. Preserve the underlying principle but replace the setting-specific details. State which parts travel, which do not, and which new authority or measurement would be needed.

Evidence record: Third-party categories, consent decision, balancing factors and outcome. Retain uncertainty and disagreement instead of compressing them into a clean label. The record should let another person reconstruct the decision without relying on the memory or status of the original decision-maker.

Decision-quality drill: Run the practice once under the most favourable plausible assumptions and again under the least favourable plausible assumptions. Compare which conclusion changes, which merely becomes less precise and which survives. If the result depends on an unstated convention, make that convention visible before acting. This is a transfer test: the method should guide a new case, not only explain the example after the answer is known.

Practical verification: Give the case file to a reviewer who did not build the analysis. Ask that person to reproduce the critical step, identify the stopping rule and name the strongest live alternative explanation. Resolve differences by returning to the governing evidence, not by averaging opinions. Record corrections, version the decision and keep a short list of conditions that would require reopening it.

6. Worked example: disclose the appointment, protect the witness

Back to contents

Mina requests the record used at a disputed meeting. The response includes her appointment and validation reasoning, removes a witness telephone number and separately assesses an allegation made by another member. The master remains unchanged; a controlled disclosure copy records each decision and explains the omitted categories.

First-principles check: Name the decision, the people or population affected, the evidence needed and the limit that remains. Write the rule before looking at the preferred outcome. Then identify the authority, observation or calculation that could change it. This keeps the method tied to evidence rather than hindsight.

Worked practice: Build the copy and a decision schedule for every redaction. Keep every intermediate step visible. A reader should be able to locate the input, apply the same rule and understand why a different result would follow if one fact changed.

Changed-context transfer: Mina also requests the access audit trail. Preserve the underlying principle but replace the setting-specific details. State which parts travel, which do not, and which new authority or measurement would be needed.

Evidence record: Source file, disclosure copy, redaction map, reasons, delivery and review. Retain uncertainty and disagreement instead of compressing them into a clean label. The record should let another person reconstruct the decision without relying on the memory or status of the original decision-maker.

Decision-quality drill: Run the practice once under the most favourable plausible assumptions and again under the least favourable plausible assumptions. Compare which conclusion changes, which merely becomes less precise and which survives. If the result depends on an unstated convention, make that convention visible before acting. This is a transfer test: the method should guide a new case, not only explain the example after the answer is known.

Practical verification: Give the case file to a reviewer who did not build the analysis. Ask that person to reproduce the critical step, identify the stopping rule and name the strongest live alternative explanation. Resolve differences by returning to the governing evidence, not by averaging opinions. Record corrections, version the decision and keep a short list of conditions that would require reopening it.

7. Redact with a reproducible method

Back to contents

Redaction must remove underlying information, not place a rectangle over searchable text. Inspect text layers, metadata, comments, attachments and filenames, then have another person test the result. Keep the unredacted master under its original controls and the released copy as a distinct version.

First-principles check: Name the decision, the people or population affected, the evidence needed and the limit that remains. Write the rule before looking at the preferred outcome. Then identify the authority, observation or calculation that could change it. This keeps the method tied to evidence rather than hindsight.

Worked practice: Test PDF redaction by search, copy-paste and metadata inspection. Keep every intermediate step visible. A reader should be able to locate the input, apply the same rule and understand why a different result would follow if one fact changed.

Changed-context transfer: The source is a spreadsheet with hidden columns. Preserve the underlying principle but replace the setting-specific details. State which parts travel, which do not, and which new authority or measurement would be needed.

Evidence record: Tool, version, redaction categories, tests, reviewer and released hash. Retain uncertainty and disagreement instead of compressing them into a clean label. The record should let another person reconstruct the decision without relying on the memory or status of the original decision-maker.

Decision-quality drill: Run the practice once under the most favourable plausible assumptions and again under the least favourable plausible assumptions. Compare which conclusion changes, which merely becomes less precise and which survives. If the result depends on an unstated convention, make that convention visible before acting. This is a transfer test: the method should guide a new case, not only explain the example after the answer is known.

Practical verification: Give the case file to a reviewer who did not build the analysis. Ask that person to reproduce the critical step, identify the stopping rule and name the strongest live alternative explanation. Resolve differences by returning to the governing evidence, not by averaging opinions. Record corrections, version the decision and keep a short list of conditions that would require reopening it.

8. Explain exemptions and partial disclosure

Back to contents

A partial response should state the applicable basis in plain language, describe the category withheld without exposing it and explain review routes. Disclose separable material and review temporary reasons, such as an active investigation, rather than turning them into permanent secrecy.

First-principles check: Name the decision, the people or population affected, the evidence needed and the limit that remains. Write the rule before looking at the preferred outcome. Then identify the authority, observation or calculation that could change it. This keeps the method tied to evidence rather than hindsight.

Worked practice: Rewrite a blanket refusal as a reasoned partial disclosure. Keep every intermediate step visible. A reader should be able to locate the input, apply the same rule and understand why a different result would follow if one fact changed.

Changed-context transfer: The investigation later closes. Preserve the underlying principle but replace the setting-specific details. State which parts travel, which do not, and which new authority or measurement would be needed.

Evidence record: Basis, affected material, explanation, review date and appeal outcome. Retain uncertainty and disagreement instead of compressing them into a clean label. The record should let another person reconstruct the decision without relying on the memory or status of the original decision-maker.

Decision-quality drill: Run the practice once under the most favourable plausible assumptions and again under the least favourable plausible assumptions. Compare which conclusion changes, which merely becomes less precise and which survives. If the result depends on an unstated convention, make that convention visible before acting. This is a transfer test: the method should guide a new case, not only explain the example after the answer is known.

Practical verification: Give the case file to a reviewer who did not build the analysis. Ask that person to reproduce the critical step, identify the stopping rule and name the strongest live alternative explanation. Resolve differences by returning to the governing evidence, not by averaging opinions. Record corrections, version the decision and keep a short list of conditions that would require reopening it.

9. Deliver securely and intelligibly

Back to contents

Match the delivery method to sensitivity and the requester’s practical access. Provide a contents note, date range, source-system explanation and abbreviations. Verify destination details and communicate secrets separately; record delivery without copying sensitive content into routine logs.

First-principles check: Name the decision, the people or population affected, the evidence needed and the limit that remains. Write the rule before looking at the preferred outcome. Then identify the authority, observation or calculation that could change it. This keeps the method tied to evidence rather than hindsight.

Worked practice: Package a mixed-format response with a usable contents structure. Keep every intermediate step visible. A reader should be able to locate the input, apply the same rule and understand why a different result would follow if one fact changed.

Changed-context transfer: The requester needs an accessible format. Preserve the underlying principle but replace the setting-specific details. State which parts travel, which do not, and which new authority or measurement would be needed.

Evidence record: Delivery choice, accessibility, manifest, authentication and confirmation. Retain uncertainty and disagreement instead of compressing them into a clean label. The record should let another person reconstruct the decision without relying on the memory or status of the original decision-maker.

Decision-quality drill: Run the practice once under the most favourable plausible assumptions and again under the least favourable plausible assumptions. Compare which conclusion changes, which merely becomes less precise and which survives. If the result depends on an unstated convention, make that convention visible before acting. This is a transfer test: the method should guide a new case, not only explain the example after the answer is known.

Practical verification: Give the case file to a reviewer who did not build the analysis. Ask that person to reproduce the critical step, identify the stopping rule and name the strongest live alternative explanation. Resolve differences by returning to the governing evidence, not by averaging opinions. Record corrections, version the decision and keep a short list of conditions that would require reopening it.

10. Correct data without rewriting history

Back to contents

Correct current operational fields when evidence supports it while preserving the original, source and correction trail. A disputed evaluative note may need an attached statement rather than replacement. Separate correction from deletion and from a challenge to the underlying meeting decision.

First-principles check: Name the decision, the people or population affected, the evidence needed and the limit that remains. Write the rule before looking at the preferred outcome. Then identify the authority, observation or calculation that could change it. This keeps the method tied to evidence rather than hindsight.

Worked practice: Process a claim that the recorded revocation time is wrong. Keep every intermediate step visible. A reader should be able to locate the input, apply the same rule and understand why a different result would follow if one fact changed.

Changed-context transfer: The source email permits two interpretations. Preserve the underlying principle but replace the setting-specific details. State which parts travel, which do not, and which new authority or measurement would be needed.

Evidence record: Request, evidence, decision, old and new values, notifications and dispute note. Retain uncertainty and disagreement instead of compressing them into a clean label. The record should let another person reconstruct the decision without relying on the memory or status of the original decision-maker.

Decision-quality drill: Run the practice once under the most favourable plausible assumptions and again under the least favourable plausible assumptions. Compare which conclusion changes, which merely becomes less precise and which survives. If the result depends on an unstated convention, make that convention visible before acting. This is a transfer test: the method should guide a new case, not only explain the example after the answer is known.

Practical verification: Give the case file to a reviewer who did not build the analysis. Ask that person to reproduce the critical step, identify the stopping rule and name the strongest live alternative explanation. Resolve differences by returning to the governing evidence, not by averaging opinions. Record corrections, version the decision and keep a short list of conditions that would require reopening it.

11. Audit timeliness, consistency and over-redaction

Back to contents

Audit receipt, search, review, redaction, approval and delivery. Sample for missed systems, unsupported withholding, accidental third-party disclosure and inaccessible format. Time-to-close alone can reward rushed or over-redacted responses, so include quality and complaint outcomes.

First-principles check: Name the decision, the people or population affected, the evidence needed and the limit that remains. Write the rule before looking at the preferred outcome. Then identify the authority, observation or calculation that could change it. This keeps the method tied to evidence rather than hindsight.

Worked practice: Audit ten requests with one decision rubric. Keep every intermediate step visible. A reader should be able to locate the input, apply the same rule and understand why a different result would follow if one fact changed.

Changed-context transfer: A released attachment retains hidden comments. Preserve the underlying principle but replace the setting-specific details. State which parts travel, which do not, and which new authority or measurement would be needed.

Evidence record: Sample, findings, containment, correction, control change and closure. Retain uncertainty and disagreement instead of compressing them into a clean label. The record should let another person reconstruct the decision without relying on the memory or status of the original decision-maker.

Decision-quality drill: Run the practice once under the most favourable plausible assumptions and again under the least favourable plausible assumptions. Compare which conclusion changes, which merely becomes less precise and which survives. If the result depends on an unstated convention, make that convention visible before acting. This is a transfer test: the method should guide a new case, not only explain the example after the answer is known.

Practical verification: Give the case file to a reviewer who did not build the analysis. Ask that person to reproduce the critical step, identify the stopping rule and name the strongest live alternative explanation. Resolve differences by returning to the governing evidence, not by averaging opinions. Record corrections, version the decision and keep a short list of conditions that would require reopening it.

12. The gold standard discloses accurately without exposing others

Back to contents

A defensible process treats a proxy record as a layered social and institutional object. It verifies the requester, searches the record system, separates data at information level, tests redaction and prefers partial disclosure where possible. The result is intelligible access without reflexive openness or secrecy.

First-principles check: Name the decision, the people or population affected, the evidence needed and the limit that remains. Write the rule before looking at the preferred outcome. Then identify the authority, observation or calculation that could change it. This keeps the method tied to evidence rather than hindsight.

Worked practice: Review one case from request to released copy and correction route. Keep every intermediate step visible. A reader should be able to locate the input, apply the same rule and understand why a different result would follow if one fact changed.

Changed-context transfer: Repeat for a historical archive request. Preserve the underlying principle but replace the setting-specific details. State which parts travel, which do not, and which new authority or measurement would be needed.

Evidence record: Policy, searches, decisions, copies, delivery, corrections and audits. Retain uncertainty and disagreement instead of compressing them into a clean label. The record should let another person reconstruct the decision without relying on the memory or status of the original decision-maker.

Decision-quality drill: Run the practice once under the most favourable plausible assumptions and again under the least favourable plausible assumptions. Compare which conclusion changes, which merely becomes less precise and which survives. If the result depends on an unstated convention, make that convention visible before acting. This is a transfer test: the method should guide a new case, not only explain the example after the answer is known.

Practical verification: Give the case file to a reviewer who did not build the analysis. Ask that person to reproduce the critical step, identify the stopping rule and name the strongest live alternative explanation. Resolve differences by returning to the governing evidence, not by averaging opinions. Record corrections, version the decision and keep a short list of conditions that would require reopening it.