Privacy Boundaries: Govern Information After Disclosure

Communication · Executive Insight Brief · 083

Disclosure starts a shared responsibility

Once sensitive information is shared, privacy becomes a coordinated responsibility rather than an individual choice

Premise

Many confidentiality failures begin with a mistaken model of disclosure. Leaders treat private information as something one person either withholds or releases, then assume that a recipient will infer the same restrictions. Communication Privacy Management Theory shows that disclosure does not end privacy. It creates a collective boundary that people must coordinate.

For executives, this shifts attention from discretion as a personal virtue to information governance as a relational practice. Knowing a fact does not automatically grant authority to redistribute, reinterpret, archive, or operationalize it. The decisive question is whether everyone who becomes a co-owner understands the same boundary.

The essential model

Sandra Petronio introduced Communication Boundary Management in 1991 and expanded and renamed it Communication Privacy Management in 2002. CPM assumes that people experience private information as something they own and believe they have a right to regulate. Privacy rules define who may know what, under which conditions, and with what obligations.

Disclosure changes an individual boundary into a collective one. Coordination then depends on linkage, permeability, and ownership: who belongs inside the boundary, how open it is, and what rights and responsibilities co-owners hold. Rules may be explicit or inferred from culture, context, motivation, relationship history, and perceived risks and benefits. Boundary turbulence occurs when rules are unclear, incompatible, violated, or destabilized by new people, technologies, or obligations.

Why this matters

Imagine an executive telling a country manager that a site closure is under evaluation. The executive expects a two-person boundary. The manager believes local HR must prepare for legal obligations and shares the information under professional confidentiality; the news then spreads. Each person may believe they acted responsibly while applying a different rule about co-ownership and onward disclosure.

CPM directs leaders to establish the boundary before sensitive information moves. State why disclosure is occurring, who becomes a co-owner, what onward sharing is permitted, which exceptions apply, how information should be stored, and when the rule changes. When turbulence occurs, reconstruct the rule chain before assigning motive. A recurring failure around handovers, shared drives, or cross-functional work may require a redesigned process rather than a stronger warning to use discretion.

Risks and limits

CPM explains privacy dynamics; it does not decide whether secrecy or disclosure is ethically, legally, or strategically correct. It cannot determine whether safety, transparency, confidentiality, loyalty, law, or public interest should prevail, nor does it prescribe one ideal level of permeability for every team or institution.

The theory is not a validated scoring system for privacy competence, and its constructs are operationalized differently across studies. Turbulence should not automatically be treated as betrayal or abnormality. Boundaries inevitably change as responsibilities and contexts change. The framework is strongest when it makes ownership and coordination visible while leaving substantive judgment to policy, law, ethics, and the facts of the case.

Executive takeaway

Treat every sensitive disclosure as a transfer of stewardship, not merely information. Name the owner, the new co-owners, the permitted uses, the onward-sharing rule, the exceptions, and the process for renegotiation. If a boundary fails, examine what each person believed the rule to be and which competing obligation intervened. Privacy governance improves when expectations are made explicit before trust is tested.

Key questions

• Who currently owns this information, and who will become a co-owner if it is disclosed?
• What onward sharing, use, storage, and exception rules have been stated rather than merely assumed?
• Where do professional duties or legal obligations conflict with the original owner’s expected boundary?
• When turbulence occurred, which linkage, permeability, or ownership rule did the parties understand differently?

Selected sources

• Petronio, S. (1991). Communication boundary management: A theoretical model of managing disclosure of private information between marital couples. Communication Theory, 1(4), 311-335.
• Petronio, S. (2002). Boundaries of Privacy: Dialectics of Disclosure. State University of New York Press.
• Petronio, S., & Child, J. T. (2020). Conceptualization and operationalization: Utility of Communication Privacy Management Theory. Current Opinion in Psychology, 31, 76-82.