Protecting Personal Information on the Air: What Should Never Be Broadcast in the Clear

Assume someone is always listening

The starting point is simple and uncomfortable: unless your traffic is on an encrypted talkgroup, treat every transmission as public. This is not a warning about a rare hacker. It is the ordinary state of things. Consumer scanners are cheap and widely sold. Phone applications stream many agencies live. Websites aggregate feeds from volunteers who point receivers at local systems and rebroadcast them worldwide. A transmission that lasts three seconds can be recorded, replayed, clipped, and shared long after the call clears.

That audience is not hostile by default. It includes hobbyists, journalists, neighbors, family members waiting for news, and people who simply find the traffic interesting. But it can also include the estranged partner of a person you are transporting, the parent a court has ordered to stay away, or someone looking for a reason to harass. You do not get to choose who is on the other end. So the discipline has to assume the worst listener is present on every channel, every time.

The good news is that most radio traffic does not need protecting. Unit numbers, general locations, staging instructions, apparatus movements, and routine status changes are operational and appropriate to say out loud. The problem is narrow and specific: a small set of information categories that, once spoken, cannot be recalled and can cause real harm. Knowing exactly what those categories are is what lets a crew move fast on everything else.

What should not go out in the clear

Sensitive information is easier to manage when you can name the categories out loud. These are the ones that most often cause trouble when they leave the microphone:

• Protected health information. Diagnoses, symptoms, medications, mental health status, communicable disease concerns, pregnancy, substance use, and similar clinical detail. The fact that someone needs an ambulance is often obvious; the specifics of their condition are not for the air.
• Full names tied to a sensitive circumstance. A name by itself is sometimes unavoidable, but a full name attached to a medical event, an overdose, a psychiatric hold, or a criminal allegation links a specific human being to something they did not consent to broadcast.
• Home addresses of protected persons. Addresses of domestic violence survivors, stalking victims, judges, officers, and others whose safety depends on their location staying private. The address is the whole point of the protection.
• Anything involving a minor. Names, schools, injuries, custody details, or the circumstances of an incident involving a child deserve the highest caution and usually belong off the air entirely.
• Criminal history and investigative detail. Prior arrests, warrant specifics, the direction of an active investigation, informant information, or tactical plans that lose their value the moment a suspect can hear them.
• Anything that enables harm or harassment. A phone number, a workplace, a vehicle and its location, or a pattern of movement that would let a listener find and target a person.

Notice that most of these are not single facts but combinations. A first name is low risk. A first name plus a street plus a medical detail is a dossier. The habit worth building is to hear those combinations forming in your own transmission and break them apart before they go out.

The duties behind the habit

This is not only good manners. Several overlapping duties push in the same direction, and it helps to understand them at a general level rather than reciting statutes.

Health information privacy. Agencies that provide medical care operate under privacy obligations covering how they handle a patient's health information. Those obligations do not evaporate because the information is spoken instead of written. Broadcasting clinical detail to an open channel is a disclosure, and disclosures are exactly what those rules govern. The precise requirements vary by jurisdiction and by the type of entity, so your agency's privacy officer or legal counsel is the authority for your situation. The general principle is durable: share the minimum necessary, and do not put protected health information where uninvolved people can receive it.

Agency policy. Most agencies already have communications and records policies that address privacy, professionalism, and channel use. When those policies exist, following them is not optional, and when they are silent on something in this article, that is a gap worth closing rather than a permission to broadcast freely.

Professional responsibility. Beyond any specific rule, there is the plain duty of care that public safety professionals owe the people they serve. A patient in the worst hour of their life did not agree to have their crisis narrated to a global audience. Protecting that dignity is part of the job even where no statute names it.

A fact-check note is worth making here: this article does not cite specific laws, penalties, or numbers, because those differ by region and change over time. If you need to know exactly what applies to your agency, confirm it with your own legal counsel or privacy officer. The behaviors described below are sound regardless of which framework governs you.

Techniques that need no encryption

Encryption is one tool, and it is not the first one. Long before an agency changes its radio system, crews can protect sensitive information with technique alone. These methods cost nothing and work today.

• Move the detail to a phone. The most reliable privacy tool in the vehicle is the one in your pocket. When a transmission is about to carry a name, a condition, or an address that a listener could exploit, say something like "switch to phone" and call the receiving unit or the hospital directly. A brief call keeps the sensitive content entirely off the air.
• Use unit-to-unit or a designated secure channel. Many systems have talkgroups or channels that are less monitored, or that your agency has agreed to use for sensitive passing. Direct unit-to-unit contact reduces the audience even on an unencrypted system.
• Minimize identifiers. Ask whether the receiving party actually needs the name or the specific condition right now. Often "one patient, conscious, transporting to your facility" carries everything the other unit needs. Details can wait for the phone or the written report.
• Reference instead of stating. Pass a run number, an incident number, or a records reference and let the other party look up the sensitive data in the system rather than hearing it on the radio.
• Agree on procedures in advance. The techniques only work if everyone knows them before the call. A short agreed phrase for "I have sensitive information, let us go off the air" prevents the awkward pause where someone blurts the detail out because they did not know the alternative.

These habits share a theme. The radio is for coordinating the response; the sensitive specifics belong on a channel where you can control who receives them. Getting a crew fluent in that distinction removes most of the risk without any equipment change.

When encryption is the right tool

Sometimes technique is not enough, and full encryption of a channel is the correct answer. Tactical operations where a suspect could exploit overheard traffic, sensitive investigative work, and channels that routinely carry protected information are common candidates. Encryption removes the open audience entirely, which is exactly what those situations demand.

Encryption also carries a real cost that agencies should weigh honestly: interoperability. When a channel is encrypted, only radios provisioned with the correct keys can hear it. That can complicate mutual aid, since a neighboring agency responding to your incident may not be able to monitor your encrypted talkgroup. It can slow coordination with partners who are not on your system. It also removes the transparency that some communities and journalists value, which is a policy conversation in its own right, not just a technical one. We reference these tradeoffs in general terms here; the specifics depend on your radio system, your region's shared channels, and your mutual aid agreements.

The practical stance is that encryption and technique are not competitors. A well run agency uses encryption where the mission requires it and disciplined off-air habits everywhere else. Encrypting one tactical talkgroup does not excuse broadcasting a patient's condition on the dispatch channel, and being careful on dispatch does not remove the need for a protected tactical channel. Decide which channels need which tool as a deliberate policy choice, not by accident.

Minors, victims, and protected persons

A few categories deserve special mention because the harm from getting them wrong is severe and often permanent.

Minors. Anything identifying a child, a child's injuries, a child's school, or the circumstances of an incident involving a child should be treated as off-air by default. Children cannot consent, they cannot protect themselves from a listener, and the consequences of exposure can follow them for years. When you must coordinate about a minor, coordinate by phone.

Domestic violence and stalking situations. The location of a survivor is frequently the exact thing an abuser is trying to learn. Broadcasting an address, a shelter location, or a survivor's movements can directly enable an attack. Treat these locations as protected information and pass them privately.

Protected persons. Some individuals have specific legal or safety reasons that their address and movements stay confidential. Your agency may not always know who falls into this category, which is one more reason to keep the default cautious: minimize identifiers for everyone rather than trying to remember who is special.

Behavioral and mental health calls. A psychiatric crisis is protected health information and also a moment of profound vulnerability. The person may be a neighbor, a coworker, or a member of your own community who will still be living here next week. Naming them and their crisis on an open channel is a lasting injury on top of the emergency itself.

Building it into training and policy

None of this holds without structure. Individual good judgment is real but it is not a system, and it fails on the busy night when everyone is tired. The habit has to live in written policy and repeated training.

• Write the do-not-broadcast list into policy. Make it short, concrete, and specific to the categories your agency actually encounters. A policy nobody can recite is a policy nobody follows.
• Teach the alternatives alongside the prohibitions. Telling crews what not to say without giving them a fast, easy alternative just produces hesitation. Every prohibition should be paired with a technique: go to phone, use unit-to-unit, pass a reference number.
• Rehearse in scenarios. Fold the off-air handoff into your regular drills so it becomes muscle memory. New members especially need to see it modeled by senior crews.
• Review recorded traffic constructively. Since your traffic is likely recorded anyway, occasional non-punitive review of how sensitive calls were handled surfaces bad habits before they become incidents. Keep the tone coaching, not discipline, or people stop learning.
• Assign an owner. A radio administrator, training officer, or privacy officer should own the standard, keep it current, and answer the edge cases. A policy with no owner drifts.
• Onboard every new member on it. Communications privacy belongs in initial orientation, not in a document someone discovers a year in.

The goal is a culture where reaching for the phone with sensitive detail is as normal as putting on a seatbelt. That culture is built through repetition and modeling, not through a single memo.

Quick guidance and a do-not-broadcast list

Bringing it together, here is the practical short version. When you key up, ask yourself one question: could a stranger use what I am about to say to identify, locate, or harm someone? If the answer is yes, move it off the air. Coordinate the response on the radio; pass the sensitive specifics by phone or a protected channel; minimize identifiers everywhere; and confirm your agency's own policy and legal counsel for the requirements that bind you specifically.

The do-not-broadcast list, in plain terms:

• Diagnoses, symptoms, medications, and mental health or substance use detail
• Communicable disease concerns and pregnancy status
• Full names attached to a medical, psychiatric, or criminal circumstance
• Home addresses of domestic violence survivors, stalking victims, and other protected persons
• Names, schools, injuries, or circumstances involving a minor
• Criminal history, warrant specifics, informant information, and active investigative or tactical detail
• Phone numbers, workplaces, and movement patterns that would let a listener find someone
• Any two or more identifiers that together point to one specific person

When any of these come up, the move is the same: say the minimum on the radio, then go to phone or a secure channel for the rest. It is a small habit that prevents a large and permanent kind of harm.