Assurance Must Be Proportionate

Transparency should be shared according to responsibility, not curiosity.

Different participants need different information to fulfil different responsibilities. A worker, employer, contractor, auditor, buyer and regulator should not automatically receive the same view.

Proportionate assurance means designing access around:

• role;
• purpose;
• consent;
• delegated authority;
• risk;
• legal obligations;
• the minimum information needed to act responsibly.

It also includes retention: information and access should not last indefinitely just because they were once justified. The model should preserve accountability without creating unnecessary exposure. It should make clear who is authorised to make, validate, challenge or rely on a claim.

Why this matters

Unlimited visibility can become surveillance. Insufficient visibility can become opacity. The goal is bounded transparency: enough information for the right participant to make a responsible decision.

The level of assurance can increase only where it is justified. A basic confirmation may answer a limited operational question. Relationship assurance may require stronger evidence that parties, sites and responsibilities are correctly connected. An enhanced investigation may warrant wider, carefully governed access when a material concern needs to be examined. These are not universal permissions; they are responses matched to purpose and risk.

A disciplined sequence helps: define the question, identify the authorised user, request the minimum necessary claim, verify it at source, record the decision, and review access. In short, visibility must be sufficient to govern and limited enough to respect people.

Trust depends not only on what is visible, but on who is allowed to see and act on it.