How to Protect Confidential Information in Field Notes
Your field notes know more about the person you're serving than their own mother does. Where they live. When they leave for work. What they drive. Who answers the door. Put that in the wrong hands and you didn't just lose a notebook. You handed somebody a map.
I used to do 30 or 40 serves a day when I built my process serving company. That's a lot of addresses, a lot of plates, a lot of "white pickup, leaves before 7" scribbled down. Every one of those notes is a promise to the client that the information stays with you. So let's talk about how to keep that promise.
Why Is Confidentiality Your Problem?
Field notes back up your attempt reports and your affidavit. They answer the client's questions. And if service ever gets challenged, they're the record of what happened out there.
They also protect people. The defendant, the attorney, the witness, the neighbor who told you "he's usually home after 5." If that stuff leaks, it can feed identity theft, harassment, fraud, or somebody showing up where they shouldn't. Most people getting served are just average Joes. They don't deserve to have their life spilled because you left your clipboard on the dash.
Here's the business side. Clients hand you their cases because they trust you. Lose that trust once and you're done with that firm. It's on you.
I Learned This One From the Other Side of the Door
My very first year, I had stickers on the back of my car. Somebody followed me home. I was living in an apartment, and I looked through the peephole and there's a guy with a bat, knocking on my door, and you could tell he was ticked off.
That taught me my physical address will never be anywhere. No markings on my car. I tell new servers the same thing about their business paperwork: if your name, your home address, and your signature on the proof of service all tie together, anybody can find your house. Set your company up so they can't.
Why does that matter here? Because if I'll go that far to protect my own address, I'd better treat the defendant's address the same way. Confidentiality runs both directions.
Where Field Notes Leak
Most leaks aren't hackers. They're habits. Watch for these:
A notebook, phone, or tablet that walks off
Assignment sheets sitting face up on the passenger seat
Weak or recycled passwords
One login shared by the whole office
A report emailed to the wrong person
Service photos syncing to your personal cloud
Public Wi-Fi at the coffee shop without the right security
Case details pasted into apps nobody approved
Old records kept long after they're needed
Paper notes tossed in the regular trash
Former employees who can still log in
Know where your info lives and who can touch it. That's step one.
Write Down What You Need. Nothing More.
The easiest data to protect is data you never wrote down. Your notes should back up the attempt report or the affidavit. That's the job.
What you usually need:
Date and exact time
Full service address
GPS location
Description of the property
Who you talked to
What they said that matters
Vehicles tied to the address
How you confirmed identity
Result of the attempt
Safety concerns
Photos, when lawful
What you don't need: Social Security numbers, financial info, medical details, names of kids who aren't part of the case, or your opinion of the guy's lawn. The Federal Trade Commission tells every business the same thing: collect and keep sensitive information only when you have a legitimate business need for it. FTC guide to protecting personal information
Paper Notes: Lock It Up or Shred It
A lot of times I'd have my field sheet, my proof of service, and my invoice all sitting together on a job. Paper is handy. Paper also falls out of truck doors, blows across parking lots, and gets read by whoever's riding shotgun.
If you use paper:
Keep one notebook just for business
Nothing on the cover. No names, no case details
Keep it on you in the field
Never leave it visible in a parked car
Lock it up at the office
Get notes into your system fast
Only the people who need it see it
Shred it when the retention period is up
Skip loose sheets whenever you can. Printed work orders and address lists are the first things to fall out of the car or get left at a service address. And never put case paper in the regular trash. Shred it so nobody can read it.
Your Phone Is a Filing Cabinet. Lock It Like One.
Phones made this job so much easier. Attempts, photos, GPS, client updates, all from the driver's seat. But that phone now holds every case you're working.
Set it up with:
A strong passcode
Auto screen lock
Device encryption
Multifactor authentication
Current security updates
Remote locate and remote wipe
Encrypted backups
Separate business and personal accounts
Notification previews hidden on the lock screen
The National Institute of Standards and Technology recommends the same kind of protections for mobile devices: authentication, encryption, controlled access, and wiping organization data off a device that's lost or compromised. NIST telework and BYOD security guide
Face unlock is nice. Back it up with a real passcode anyway. A short PIN and a recycled password won't cut it.
Keep It All Inside One System
Here's where a lot of servers get sloppy. Notes in a texting app, photos in the camera roll, the affidavit in a personal email. Now that case lives in five places and you control none of them.
What I loved about the platform I used back then is it took all the information from the serve and threw it on a field sheet, nice and neat. You click new attempt, fill it out, done. No retyping it into some PDF app. That's the idea: one approved system, start to finish.
That's exactly how we built Mighty Process Server. Attempts get logged with GPS and photos right in the app. The affidavit builds from the job itself. And when it's time to sign, the server signs their own affidavit through Copy Link to Signature Affidavit. Nobody signs for anybody else, period. Need it notarized? The Mighty Notary integration lets the affidavit get signed and notarized right in the app, so it's not bouncing around in email attachments.
A couple more rules:
Service photos should never auto-sync to your personal photo account. One picture can show a face, a plate, family members, the mail, and the home security system.
Don't paste case details into AI tools, translation apps, or transcription services unless they're specifically approved for confidential business data.
Sending Reports Without Sending Them to the Wrong Guy
Your job isn't done when you pull away from the address. You still have to get the report to the client safely.
Send it through:
A secure case-management platform
An encrypted client portal
Company-approved email
Access-controlled file links
A trusted mobile network
A properly set up VPN
The FTC tells businesses to protect sensitive info the whole time it's moving between devices and systems. FTC on storing and sending sensitive data securely
Before you hit send, confirm who you're sending it to. One wrong autofill and you've got a privacy incident on your hands.
This is where a client dashboard earns its keep. In Mighty Process Server, your clients get their own private dashboard to check on their jobs, so status updates aren't riding around in email chains. And it doesn't matter if the client is down the street or across an ocean. With international address search, worldwide time zones, and global pricing with instant quotes, attorneys and firms anywhere can order and track a serve without case details getting passed around.
Everybody Gets Their Own Login
Not everybody in your office needs to see every case. Give access based on the job, and take it away the day somebody leaves, changes roles, or finishes the assignment.
No shared logins. When I landed a child support contract, I had the agency's state employees get their own logins so they could upload documents and enter jobs straight into my system. Orders came in boom, boom, boom, and every one of them had a name attached to who entered it. That's the right way.
In Mighty Process Server, a server's name is tied to their own login and email, so nobody can change another person's account info. Sub-users can update their own name under their profile, and that's it.
Every so often, check:
Who can view case info
Who can download documents
Who can edit or delete notes
Who can export reports
Whether any former users are still active
Whether there were suspicious login attempts
Audit logs help you figure out who opened or changed a record. That's gold when you're chasing an error, answering a complaint, or confirming the history of an affidavit.
Write It Like the Judge Is Reading It
Because someday they might be. Attorneys, courts, clients, regulators, and the other side can all end up reading your notes.
Don't write: "The recipient is hiding."
Write: "An adult occupant stated that the recipient was not home. A vehicle matching the client-provided description was parked in the driveway. I received no additional information confirming the recipient's presence."
No insults. No jokes. No discriminatory descriptions. No guessing at motives. Keep physical descriptions neutral and limited to what you need for ID. Clean writing is safer writing, too, because junk details never make it into the permanent record.
Photos, Audio, and Video
Photos can spill more than your notes ever will. Neighbors, kids, mail on the porch, plates, cameras, the inside of the house.
Take only what's necessary, appropriate, and lawful. Upload it to the case record and clear it off personal storage per your company policy.
Recording and privacy laws change from state to state, so check yours before you hit record. And don't trespass, peek through windows, or secretly record protected conversations to build your case. That's not diligence. That's a lawsuit.
How Long to Keep It, and How to Get Rid of It
There's no one retention period for every field note. It depends on local law, court rules, your contracts, licensing standards, insurance, and whether service might get challenged.
Write a policy that covers:
Which records you keep
Where they're stored
Who can access them
How long you keep them
When you hold off on deleting
How you destroy them
If a record is tied up in litigation, a subpoena, an investigation, a complaint, or a preservation request, don't delete it. Once the retention period is over, destroy paper and digital records securely.
What a Breach Can Cost You
It depends on what got out, the laws that apply, your contracts, and the harm done. You could be looking at client complaints, lawsuits, regulatory investigations, money lost, disciplinary action, a busted reputation, or lost accounts.
A breach doesn't automatically mean a fine or a suspended license. But skipping reasonable safeguards, or ignoring an incident, makes your exposure a lot worse. Know the privacy rules that apply to your clients, your state, your contracts, and how you run your business.
Lost the Phone? Here's the Drill.
A missing notebook, stolen phone, hacked account, or report sent to the wrong person gets reported right away. Not tomorrow. Now.
Tell the company or the client contact.
Figure out what information might be exposed.
Lock or remote wipe the device.
Change passwords and end active sessions.
Save evidence of what happened.
Follow your company's response plan.
Find out whether you're required to notify anyone.
Write down what you did to fix it.
Never hide it. Your manager, the attorney, your insurance company, your tech provider, or a security pro may need to help you contain it. Own it, fix it, move on.
Train Your People Every Year
Train on confidentiality at onboarding and at least once a year after that. Do it again any time you change tech, policies, rules, or clients, or when a new scam starts making the rounds.
Cover:
What counts as confidential
Locking down phones
Handling paper records
Using approved platforms only
Spotting phishing
Reporting a lost device
Responding to a breach
Keeping and destroying records
Spot-check people. Bad habits show up in an audit long before they show up as an incident. And independent contractors follow the same rules as employees whenever they touch your company's or your client's info.
The Bottom Line
Your notes hold people's lives. Collect only what you need, keep it in one secure system, give everybody their own login, send it safely, and destroy it when you're done. Do that and your clients will keep trusting you with their cases.
Stay sharp. Stay informed. Live Mighty!
Read the full article at www.mightyprocessserver.com
This article is published by Process Server Daily, powered by MightyAutomation.ai, the leader in legal support intelligence.