Fable
The black ink stick in the letter-copying shop saved more than just clean paper
The letter-copying shop hired a fast apprentice who could turn customer letters into accounts, work orders, and draft replies. The shopkeeper was delighted, because the old accountant finally no longer had to stay up all night.
More and more letters arrived, containing names, addresses, medical records, ID numbers, contract prices and children's schools. To be accurate, the apprentice spread everything out on the workbench.
Once an outsourced proofreader saw the entire stack of original letters and even pasted a dispute segment with names into the example book. After the client found out, the shop nearly closed. The manager first had everyone sign a confidentiality oath and also posted "protect privacy" at the door. But as long as the original letters still circulated everywhere, oaths could not stop copying, screenshots and mistaken sends.
They changed the process. Before entering the apprentice workbench, names were replaced with Client A, phone numbers kept only the last four digits, ID numbers were blacked out, and addresses were reduced to city level.
Different tasks get different granularity. Addresses are unsealed only when a shipment must be sent; only aggregated data is used when analyzing trends; debugging samples cannot carry real identities. The shop also records who unsealed what, why, and when it will be deleted. Apprentices can still complete work orders, but no longer touch every piece of raw private data by default.
The shopkeeper did not lock all the letters in the cabinet, because the work orders still had to be processed. Instead he used black ink bars: proofreaders could see only the question and the handling result, not the details that would directly identify a person. The first version masked too little — the school name next to the address was still visible; the second masked too much — the accounting office could no longer judge regional shipping fees. The shopkeeper had to decide how far to mask based on the purpose.
This small incident made everyone stop and review. They did not rush to swap in a more impressive-sounding explanation, but instead wrote down clearly, one by one, the entry points that went wrong, the rules that were misunderstood, and the boundaries that needed to be preserved.
Later, the letter-copying shop continued to use incoming letters to do work, but sensitive clues were no longer left out in the open. Protection is not about making the paper clean; it is about making sure the wrong people cannot see it. Everyone finally understood that privacy protection is not about locking data away forever. The key is to let personal information be seen only when necessary, within the necessary scope, and by the necessary roles.