Definition
The unintended or unauthorized disclosure of the identity of an individual or entity that has been promised anonymity or was procedurally designated as anonymous by a communicator, institution, or agreement, such that the identity becomes knowable to third parties and the source is exposed to potential harm, retaliation, or legal consequences.
Principle
Principle
Revealing a promised anonymous identity undermines the trust relationship that enables the provision of sensitive information; because anonymity is often an incentive and a protective measure, its breach reduces future willingness of similarly situated actors to share information and alters risk calculations for both source and communicator.
Demonstration
Demonstration
Illustrative Scenario → Situation: A reporter agrees to protect a whistleblower's identity. Recognition: The reporter includes multiple contextual details in a piece. Action: Combined with publicly available records, those details enable third parties to infer the whistleblower's identity. Consequence: The whistleblower is identified, facing professional and personal risk; other potential sources become less willing to come forward.
Misapplication
Misapplication
Defining a breach only as the explicit publication of a name and ignoring re‑identification risks derived from combining indirect identifiers; the error is treating explicit naming as the sole criterion for breach rather than assessing whether published material renders identity inferable.
Consequence
Consequence
An anonymity breach can causally produce harm to the source (retaliation, loss of employment, legal exposure, safety risks), reduce future flows of sensitive information to communicators, force institutional policy changes, and prompt legal or ethical liability inquiries for those who promised protection.
Reversal
Reversal
Disclosure of identity may be permissible or required when there is a competing, demonstrable public interest (e.g., imminent threat of harm, criminal activity), when the source withdraws consent, or when no promise of anonymity was made; under those conditions, revealing identity may not count as a breach.
Boundary
Boundary
Clearly within: Publishing a covert operative's name after promising anonymity. Boundary case: Publishing detailed contextual data (dates, locations, unique events) without a name—whether this is a breach depends on whether the data allow re‑identification in the specific context. Clearly outside: Reporting on public figures whose identities were never promised to be concealed.
Semantic Tension
Semantic Tension
Confidentiality ↔ Public Interest/Transparency — the duty to protect a source's anonymity can conflict with demands for public oversight, accountability, or disclosure when other societal interests are invoked.
Synthesis
Synthesis
Protecting anonymity requires active risk assessment of direct and indirect identifiers and institutional safeguards; the normative question is not simply whether a name was revealed but whether the communicator's actions made identification reasonably inferable.