Risks in Printouts, Scanned Images, and Photos

When internal materials cannot be sent as digital files, people may print and photograph them or scan them.

Putting something on paper may seem safer.

However, printouts, scanned images, and photos also leave clues. Print time, printer, paper condition, margins, background, reflections, shooting location, objects on the desk, and image metadata are involved.

Changing something to paper does not remove the risk of revealing its source.

Clues Left in Printouts

Printouts have visual information and print history.

In companies and organizations, logs may record who printed what, when, and on which printer. The paper surface may also retain document numbers, distribution recipients, watermarks, page numbers, and version numbers.

Making something paper does not mean its digital history has completely disappeared.

The act of printing itself may be recorded.

With printers inside an organization, user authentication, print job names, print times, number of copies, and printer locations may be recorded. Temporary data may also remain on multifunction printers. The printout itself may also contain management numbers, watermarks, distribution recipients, or page-level identifiers.

Putting something on paper may reduce file metadata. However, it increases other clues: the printing operation, identifiers on the page, and distribution scope. When using paper for whistleblowing, it is better not to assume simply that it is safer than digital material.

Risks in Scanned Images

Scanned images may retain information such as the scanner, creation software, and creation date and time.

Skew, margins, page order, image quality, shadows, and folds can also show how the material was processed.

Scanned PDFs may also retain metadata.

Do not assume something is safe just because it has been made into a PDF.

In scanning, device settings and the environment can also become clues. Resolution, color, skew, shadows, paper folds, margins, and page order show how the material was processed. If an organizational scanner was used, scan-send logs and recipient email records may also remain.

Also, if a scanned PDF is shared as-is, it may contain information related to the creation software, creation date and time, device name, and save path. Treat the file after scanning as an ordinary digital file and check it.

Risks When Photographing

When paper is photographed with a smartphone, photo-specific risks are added.

The desk, floor, wall, keyboard, fingers, reflections, outside of a window, and surrounding documents can appear in the image. Image metadata may also retain capture time and location information.

Even if you think you cropped only the page, information may remain at the edges or in reflections.

When photographing, information about the shooting location is easy to include. Wood grain on the desk, floor, wall, lighting, keyboard, employee ID, document edges, outside of a window, and the smartphone's shadow become clues. Fingers holding down the document, sleeves, and accessories also indicate the person or environment.

In addition, smartphone photos may retain capture time, device model information, and location information. If they are automatically synced to a cloud photo app, evidence materials may remain in the cloud of a real-name account. Before shooting, check location settings; after shooting, check metadata and storage location.

Inference From the Content Remains

Whether you print, scan, or photograph, inference from the material's content remains.

Materials with limited distribution, specific meeting materials, screens only a small number of people can see, and documents with individualized watermarks narrow the source even if the format is changed.

Turning something into an image can be part of metadata protection, but the risk in the content itself remains.

For example, even if only part of a material is photographed, the original material may be identifiable from the document number, chapter number, table format, or distinctive terms. If the document had limited distribution, the organization may know who received it. In documents with individualized watermarks, identification information that is hard to see visually may be embedded.

Managing Material Before and After Processing

When handling printouts and scanned images, also manage the raw material before processing. Pay attention not only to the public version with faces and backgrounds hidden, but also to unedited photos, original scan files, automatic backups inside a smartphone, cloud sync, and shared folders.

Even if the public version is made safer for publication, risk remains if the original data stays in a real-name cloud account. Decide who will hold the original data, where it will be stored, and when it will be deleted. When whistleblowing or evidence preservation is involved, it is also important not to decide alone what should be deleted and what should be kept, but to check with a trusted support contact.

Order to Check Before Sharing

Before sharing printouts, scanned images, or photos, check in the order of page surface, surroundings, file, and path.

Checking in this order makes it harder to focus only on the information visible on the paper. When handling internal materials, the more valuable the content, the stronger the information that points to its source. Do not assume something is safe because the format has changed; check which logs and clues remain at each stage.

Balancing Risk Reduction and Evidentiary Value

In whistleblowing or consultation, it may be necessary to preserve evidentiary value. At the same time, information that leads back to the whistleblower must be reduced. If a material is altered too much, it may become weak as evidence; if it is not altered enough, the person may be identified.

For that reason, it is useful to separate publication, consultation, and preservation copies. The publication copy reduces information that leads back to individuals or the source. The consultation copy shows the necessary scope to a trusted person. The preservation copy is stored in a place where access scope can be managed, to avoid alteration.

Summary

Printouts, scanned images, and photos may seem safer than digital files.

However, print logs, scan information, shooting backgrounds, reflections, image metadata, document numbers, watermarks, and version numbers become clues.

Changing something to paper does not erase where the material came from.

For whistleblowing, do not only change the format. Also check the history left before and after printing, scanning, and photographing, and the inference possible from the content.

Related tools

Related articles