Outputs are scrutinised with the aim of ensuring that the risk of identification, even indirectly, of individuals is effectively eliminated. Internal access to identifiable individual data is only available on a need to know basis. The NSO does not provide access to confidential data in its possession to persons outside the office. Consultants and contractors employed by the NSO are subject to the same confidentiality constraints and disciplines as NSO staff members. They are required to undertake a confidentiality oath or sign a confidentiality declaration appropriate to the work on which they are employed.
Some statistical projects require the collection and storage of names and addresses.
Records that include names and addresses or other information that may identify an individual are subject to controls to prevent unauthorised linkage with other data. The preferred control mechanism is to maintain the plain text information in separate files. Authorised access to such files is restricted to those with a specific requirement for the plain information. The NSO informs those who directly provide it with personal and commercial data of the intended use of the data. Where data is received from other organisations, any confidentiality undertakings given at the time of collection are respected.