Standards · 5 min
The Discretion Standard: NDAs, Privacy and Private Clients
The short answer: discretion is not a personality trait — it is an operating system. It has four verifiable components: a contractual layer (NDA by default), a structural layer (one person on your file, no subcontracting), a digital layer (where your data lives and who can read it), and a behavioural layer (no name-dropping, ever, in any direction). Any provider serving private clients should be able to describe all four without hesitation.
The contractual layer: what an NDA should cover
A serious confidentiality agreement for private-client work covers more than 'don't talk to the press'. It should extend to the existence of the relationship itself, survive the engagement's end without a sunset, bind any person who touches the file, and specify what happens to documents and data at termination. Just as telling is the provider's posture: the right answer to 'will you sign an NDA?' is 'we assumed you'd want ours or yours — which do you prefer?'
The structural layer: who actually sees your file
Most confidentiality failures are not betrayals; they are architecture. Marketplaces route your affairs to whoever is available. Agencies brief teams. Subcontractors brief their subcontractors. Every additional reader is a surface. The private-client standard is single-threaded: one named person holds the file, a defined backup exists for continuity, and nobody else — not sales, not 'the team' — reads client matters.
- One named interlocutor; a single defined backup for continuity
- No subcontracting of client matters without explicit consent
- Suppliers briefed on a need-to-know basis, never with your identity where avoidable
- Bookings and orders placed in the practice's name when you prefer
The digital layer: quiet data is part of quiet service
Your affairs today are also a data trail: documents, scans of identity papers, addresses, travel patterns. The questions that matter are unglamorous — where files are stored and under which jurisdiction, who has access, whether devices are encrypted, how long data is kept, and what is deleted when the engagement ends. Under GDPR you are entitled to precise answers; a provider who improvises them is telling you something.
How to verify a standard in one conversation
Three questions expose almost everything. 'Who, by name, will know my affairs?' — the answer should be one person, immediately identifiable. 'Tell me about a client you've helped' — the correct answer is a polite refusal; a provider who name-drops to win you will name-drop you to win others. 'What happens to my file if we stop working together?' — the answer should be specific, technical and rehearsed. Discretion, in the end, is not the absence of stories. It is the presence of a system.
FAQ
Do you sign NDAs?
By default, for any client who requests one — ours or yours. And the standard it describes is observed identically for clients who never ask.
Are client names ever used as references?
Never, in any form — not anonymised anecdotes, not 'a well-known family', nothing. References, where needed, come from professional advisors under the same constraint.
Is my data shared with suppliers?
Only the minimum a supplier needs to execute, and where possible under the practice's name rather than yours.