Define the question
Decide whether the sample tests format, chronology, coverage or task quality. Choose a representative slice rather than only the cleanest examples. Include a short description of selection rules, known gaps and what the sample cannot show.
Minimize and review
Remove material outside the agreed scope and have the appropriate privacy, security and legal reviewers assess the sample. Masking names alone may leave identifying context in free text, attachments, timestamps or combinations of fields.
Agree handling before transfer
Identify authorized recipients, secure transfer method, retention period, use restrictions and deletion expectations. An NDA is not a complete data-processing or licensing agreement. Obtain advice for the actual jurisdiction and records involved.
Keep an evidence trail
Record the exact sample version, preparation steps, reviewer approval and delivery receipt. Do not assume that approval of a sample also authorizes full export. The final package needs its own scope and acceptance checks.
Sources & further reading
- FTC: Protecting personal information
- ICO: Anonymisation guidance
- U.S. Copyright Office: Copyright basics
Provider statements are attributed claims, not audited outcomes. Reviewed 19 October 2026.