Publication Workflow for Protecting Sources and Yourself

Protect sources, reporters, newsrooms, people involved, and people who provided materials by checking originals, publication copies, review roles, records, and post-publication response.

When publishing a reported article, protecting only the source is not enough.

The reporter, newsroom, people involved, people who provided materials, and people who were at the scene also need protection.

Conversely, if the reporter's own workflow is weak, the source may be inferred from there. Sharing materials through a cloud account under a real name, adding too much follow-up detail on social media right after publication, publishing photos that reveal the reporting time, or publishing a PDF that still contains edit history. Small mistakes like these put both the source and the reporter at risk.

This article organizes a publication workflow for protecting sources and yourself at the same time.

Separate the people and information to protect

Before publication, first separate what needs to be protected.

Even when you say "source" in one word, multiple people may be involved: information providers, witnesses, people named in materials, people who were at the scene, and newsroom staff responsible for the article.

If the protection target is vague, the information to check also becomes vague.

Before publication, write down "who would be in trouble if they were inferred."

Separate originals from publication copies

For reporting materials, separate originals from publication versions.

Originals have meaning as evidence and reporting records. Publication materials, on the other hand, should not retain unnecessary metadata or specific clues.

The basic rule is not to publish originals as they are.

However, for materials where legal evidentiary value matters, it is better not to decide on processing alone. Consult the newsroom, legal staff, lawyers, and specialists.

Do Not Check the Article Text and Materials Separately

Checking only the article text and assuming it is safe, or checking only the materials and assuming they are safe, is not enough.

Even if the article text blurs the date and time, an attached image may retain the exact capture time. Even if a department name is hidden in a material, the article text may reveal the department. These combinations occur.

Before publication, check the article text, images, materials, publication time, and social media follow-ups together.

Even if each item seems safer on its own, the combination may become dangerous.

Separate pre-publication review roles

For high-risk reporting, it is safer not to finish the check alone.

The person who wrote the article knows too much about the reporting process, so they may become less likely to notice clues. A third party may notice expressions that narrow the candidate pool.

Even in a small newsroom, check with these roles in mind.

Even if the same person takes multiple roles, separate the time and reread from a different perspective.

Define Revision Criteria

In a publication workflow, define not only the conditions for publication, but also the conditions for returning the article for more work.

If you publish while still unsure, you may be forced to correct or delete the article after publication. In high-risk reporting, do not publish items whose judgment is unresolved.

Sending the article back for revision is not a process for stopping the story.

It is a process for lowering publication risk and returning the article to a state where the publication decision can be made again.

Record the publication decision

For high-risk articles, record what was checked before publication.

Who checked the article text, which materials were turned into publication copies, which information was withheld, and who is responsible for post-publication response. A record makes it possible to review the decision if a problem occurs after publication.

However, this record itself contains source information.

Manage the storage location and access permissions.

Decide the post-publication response first

Post-publication handling is also part of the publication workflow.

After the article is out, who will answer inquiries? Will the source be contacted? Will there be social media follow-ups? If a correction is needed, who decides?

If you decide in a hurry after publication, it becomes easier to release information emotionally.

Deciding the response policy before publication makes it easier to protect the source and the reporter.

Be able to explain the decision to the source

Before publication, also check whether you are able to explain the situation to the source.

What will be published, what will be withheld, what form the materials will take, and what reactions may occur after publication. This does not mean making the source decide everything, but information that affects the other person's safety must be handled carefully.

If the source proceeds without understanding post-publication risk, unexpected danger may occur after publication.

In high-risk reporting, safety checks on the source side are important as well as checks inside the newsroom.

If there is remaining unease that you cannot explain, do not rush the publication decision.

Summary

To protect sources and yourself at the same time, check not only the article text, but also materials, metadata, publication time, contact paths, and post-publication response.

First separate the people and information to protect, then separate originals from publication copies. Do not check the article text and materials separately; look at whether the source can be inferred from the combination.

For high-risk reporting, separate reviewer roles and decide reply and correction policies before publication.

Anonymity is not work done only just before pressing the publish button.

It is a workflow that continues through reporting, editing, publication, and post-publication response.

Related tools

Related articles

• Publishing workflow —Anonymity for Protecting Sources
• Publishing workflow —Pre-Publish Checklist
• Journalists —Reply risks and post-publication handling after reporting
• Journalists —How journalists should think about anonymity
• Journalists —Contact methods and account separation for journalists
• Journalists —Communication traces left by contact with sources