Sharing Information on the Internet Without Compromising Privacy

The Internet is a vast showcase: whatever you upload there can be seen by your neighbor, someone curious on the other side of the world, or an automatic search engine that indexes it forever. And of course, when we talk about personal data, things get complicated. What happens if a public administration publishes documents with names, addresses or even sanctions on its website? Then data protection comes into play.

The Catalan Data Protection Authority (APDCAT) made it clear in one of its recommendations: yes, information can be published online, but wisely. Transparency does not mean a free-for-all. Let’s look at the key points in language clearer than legal jargon.

Publish only what is necessary

The first rule is almost common sense: it’s not about publishing “just in case.” Before uploading any document, you should ask yourself:

  • Is it legal to do so?

  • Are those data essential for the objective?

  • How long do they need to remain available?

The principle of proportionality rules: less is more. The fewer personal data, the lower the risk of exposing someone.

Consent, security, and responsibility

If we’re talking about sensitive data such as images, voices, sanctions, or medical information, there are two options: either the person gives consent, or there is a regulation that authorizes it. “Everyone does it” is not a valid excuse.

Furthermore, publishing online means ensuring the information: limiting who can see it, controlling how long it remains visible, and above all, preventing Google or other search engines from indexing lists with personal data that later become impossible to delete.

Common situations

  • Minutes of plenary sessions or meetings: they can be published, but without details that identify people (addresses, phone numbers).

  • Infractions and sanctions: they must appear anonymized, unless legally required otherwise.

  • Public forums and blogs: they should be moderated, because people often leave personal data without thinking.

Official bulletins and search engines

Official journals are a special case: their purpose is to provide legal publicity to regulations and administrative acts. But even there, privacy rules apply: publish only what is necessary, for the required time, and always making it easy for citizens to exercise their rights (access, rectification, erasure, objection).

And be careful with search engines: if a document is indexed by Google, it may remain accessible years after it has lost all relevance. That’s why it is recommended to configure websites to limit this automatic crawling.