How do I assess the confidentiality habits of an HR consulting firm’s staff?

In HR consulting, discretion is the product. A single leak can end a client relationship, so you want evidence that confidentiality is practised, not only promised. Start with the paperwork: staff agreements, written policies, onboarding material and any training records. Check that they exist, are signed and are up to date.

Then watch the habits. Where are files kept, and who can open them? Do staff use shared accounts, personal devices or open desks? Ask how paper is stored and destroyed, and how access is removed when someone leaves. If you can, tour the office and ask a staff member to walk you through how a typical file is handled.

Ask about incidents. Has anyone sent something to the wrong person, lost a device or discussed a case in public? What did the firm do afterwards? A candid answer is more reassuring than a claim that nothing has ever happened. Finally, consider your own process. The firm should be asking you to sign a confidentiality agreement before you see anything sensitive. Your lawyer can advise on that, and on what to review about how the firm handles personal information, both on paper and on its computers.

Key takeaways

• Review signed staff agreements, written rules and training records for completeness.
• Watch how files are stored, shared and destroyed, and how access is removed on departure.
• Ask about past incidents and how the firm responded.