The most sensitive thing in your project folder isn't the footage
Pina Vetter
på
Security & Compliance
Cast, crew and interviewees trust you with their personal data. Here are simple habits for filmmakers to protect it, from collecting less to keeping everything in one secure place.
Secure tools are only half of data security. The other half is how you handle the personal data of the cast, crew and interviewees you work with.
Imagine opening the project folder from your last production.
A cast list. A crew sheet with phone numbers. Scanned release forms with full names and signatures. Maybe a message from an interviewee who told you something very private, because they trusted you.
You might not see yourself as someone who handles sensitive data. But the moment you make a film with real people, you do.
October is Cybersecurity Month, and it got us thinking about something we take very seriously at Connie: keeping your data safe.
Two halves of the same story
For us, that means storing your data on secure servers we control, with all data kept in the EU. It means having clear processes for who can access it, and making sure nobody sees anything they shouldn't. You can read more about how we do this in our Trust Center.
But that's only half of the story.
The other half is how you handle the personal data you work with. On Connie, and everywhere else. A secure tool can only protect what you put into it. The habits you bring to a production matter just as much.
What counts as personal data on a film production?
More than most people think. Personal data is anything that can identify a real person. On a typical production, that includes:
Names, phone numbers, email addresses and home addresses
Signatures on contracts and release forms
Photos, footage and voice recordings of identifiable people
Bank details collected for payment
Anything an interviewee tells you about their life, health or beliefs
Some categories need extra care under GDPR, such as health, political opinions and religion. In documentary work especially, your story may touch on exactly these things. If you want a quick refresher, our lightning guide to personal data & GDPR covers the basics.
Five habits that make a real difference
None of these are complicated. They're just easy to forget when you're deep in a shoot.
1. Only ask for what you need
Do you really need a home address for a one-day extra? Every extra detail you collect is something you then have to protect. Ask for less, and you have less to worry about.
2. Be clear and transparent about why
People should know what you’re collecting, why you need it and how their details and footage will be used. That’s what real consent looks like. A signature on a form nobody read is not the same thing.
So when you set up your contract, spell out exactly how the material will be used. Whether that’s internal use, social media, a festival, broadcast or something else.
3. Take extra care with sensitive personal data
Documentary subjects, minors, and anyone sharing things like political opinions or religion deserve more care, not less. Keep the circle of people who can see these documents small, and give every team member only the access their role needs. And if you’re working with anyone under 18, collect the signature from a parent or legal guardian.
4. Don’t keep it forever
When a project ends, decide what you still need and for how long. Check the rules in your country on how long certain documents and contracts have to be stored. Signed releases and contracts are often worth keeping, since festivals, distributors and broadcasters may ask for them. A spreadsheet of everyone’s addresses from a shoot two years ago probably isn’t. And if you’re making your film through a school, university or production company, check their guidelines too.
5. Keep it all in one place
This is where things most often go wrong. A release photographed in WhatsApp. A PDF in an email thread. A scan on a freelancer’s computer. Suddenly one person’s details are in three places, and you can’t really keep track of any of them.
This is where a tool like Connie makes a real difference. You can send out agreements and forms for signature, and upload ones that were signed elsewhere, like a paper form you scanned. Whichever tool you choose, make sure it meets the highest security standards. That way you don’t have to worry about data security on that end.
Your own data matters too
You're a person with an identity and a digital footprint as well. A few small habits go a long way:
Use a password manager. One strong, unique password for every account, and you only have to remember one.
Turn on two-factor authentication. Start with your email, since it unlocks almost everything else.
Pause before you click. Fake casting calls, fake festival invitations and "clients" who need a file opened right now are common. If something feels rushed, check the sender.
Log out on shared computers. Edit suites and school machines are used by lots of people.
Be careful on public wifi. At cafés and festivals, use your phone hotspot or a VPN when you log in or handle documents.
None of it is complicated. It just becomes a habit.
It's not just about the tools
All in all, keeping your data and the data of the people you work with safe doesn't end with secure tools. It's also about how you work, and whether you keep data security in mind from the first email to the final cut.
Ask for less. Keep it in one place. Let go of it when you're done. Small choices like these show the people who trust you with their story that you take that trust seriously.
This article is for general guidance and isn't legal advice. Requirements vary by country and by project, so if you're unsure, it's worth checking with someone qualified.
Connie is a GDPR-compliant eSignature and document management platform built for film, media, and creative professionals. Find out more about Connie or book a demo.
Related articles
Tidligere indlæg:
