Design for the conditions people face
Field teams may work with intermittent connectivity, shared equipment, limited charging, and time pressure. A security process that assumes continuous internet access is likely to be bypassed. Start with the actual workflow and identify where information is most exposed.
Map the journey from the first interview or observation to the final repository. Include handwritten notes, recordings, photographs, temporary files, and messaging applications. Sensitive information often accumulates in these intermediate steps.
Limit what each device holds
Collect only the information needed for the task and keep it locally for as little time as practical. Use device locks, encrypted storage where supported, and individual accounts rather than a shared password. Separate identifiers from response data when the workflow allows it.
Agree what happens if a device is lost or damaged. Staff need a reporting contact, a way to identify the device, and clear instructions about which actions they may take. Remote controls are useful only when the equipment and connectivity support them.
Make synchronisation deliberate
A successful upload should be confirmed before local copies are removed. Check that records are complete, associated with the correct project, and not duplicated. Protect transfers and avoid ad hoc sharing of entire datasets through personal accounts.
Offline changes need a conflict policy. If two people update the same record, the system should preserve enough information to review the difference rather than silently choosing a winner. Audit trails help distinguish an honest correction from an unexplained alteration.
Practise the difficult moments
Walk through scenarios before deployment: a lost device, an accidental disclosure, a request to see participant records, or an extended network outage. These exercises reveal unclear responsibilities while changes are still easy to make.
Review the process with field staff after the first collection period. Ask what was difficult, where unofficial workarounds appeared, and which instructions were misunderstood. The resulting changes should improve both protection and the reliability of the evidence being collected.