How to run corporate communications release control from source authority to correction

Corporate communications operations should make authority and evidence visible before they make a message visible. This guide uses one fictional case: Cedar Vale Engineering Ltd is considering consolidation of a customer-support site in England. The board has not made a final decision.

A public announcement, employee message, manager briefing and customer notice would therefore require separate purposes, audiences and approvals.

The operating question is not simply who writes the copy. It is whether Cedar Vale can move one authorised source version through employee boundaries, factual checking, claims review, rights, accessibility, privacy, security, controlled release, correction and close-out without losing what each specialist decided.

No live announcement or system has been tested. All thresholds, service levels and dates remain buyer-owned fields. This is an editorial operating method, not legal advice or evidence that Cedar Vale could publish.

What to take away

Make authority and evidence visible before making a message visible.
Separate communication functions so no single approval route covers all.
Classify each statement and hold documentary evidence for objective claims.
Map personal data by purpose and keep channel permission separate.
Controlled rehearsal must not create a false release or live announcement.

Define the job before opening a document

The job record should identify the legal organisation, proposal status, affected England operation, intended recipients, purpose of each communication, factual owner and final decision authority. It should also state what is outside scope. Public relations, marketing, investor relations, customer service, statutory notices and incident communication may share channels, but they do not share one approval route.

Employee communication deserves an early lane. ACAS says an employer should consult employees and representatives on a clearly defined issue before a final decision, and lists when consultation is legally required. Its guidance on what and when to consult applies across Great Britain.

It does not establish which duties apply to the fictional proposal. Cedar Vale's employment reviewer must determine sequencing and stop public copy presenting an open proposal as settled.

The sequencing rule is to open an employee lane first, before external wording, so a premature public message cannot overtake consultation. Record questions and corrections from affected people separately from copy approval.

Create a source-copy register only after that boundary is recorded. Give every fact, quotation, date and status an evidence ID. Mark who supplied it, what it proves, when it expires and who may correct it. A draft that lacks authority returns to intake.

The source-copy record also names the decision status, factual owner, affected groups, evidence IDs, confidentiality class and the people authorised to approve each use.

Assign functions with real stopping power

A practical operating model separates responsibility even when a small organisation combines tasks:

Function ownership and limits

Function

Corporate decision: Proposal status, board authority
Factual control: Source records, dates, unknowns
Employment review: Affected people, consultation sequence
Claims and advertising: Claim classification, substantiation
Privacy and PECR: Purposes, roles, objections
Publishing and records: Approved version, timestamps, archive

Owns

Corporate decision: Approval settles employment
Factual control: Repeated wording becomes true
Employment review: Public release replaces dialogue
Claims and advertising: Corporate label removes remit
Privacy and PECR: Existing address permits every message
Publishing and records: Delivery proves attention

Must not assume

Corporate decision
Factual control
Employment review
Claims and advertising
Privacy and PECR
Publishing and records

Function	Owns	Must not assume
corporate decision	proposal status, board authority, spokesperson	that approval settles employment or legal questions
factual control	source records, dates, quotations, unknowns	that repeated wording becomes true
employment review	affected people, consultation sequence, manager route	that public release can replace dialogue
claims and advertising	claim classification, substantiation, paid control	that a corporate label removes advertising remit
privacy and PECR	purposes, roles, contact route, objections, retention	that an existing address permits every message
accessibility	recipient tasks, formats, test evidence, alternatives	that file availability proves usability
rights and licensing	creators, owners, licences, edits, territories	that commissioning transfers ownership
security and incident	access, credentials, logs, recovery, technical facts	that communications staff can validate an incident
publishing and records	approved version, channels, timestamps, correction, archive	that delivery proves attention or agreement

Names, deputies and escalation contacts belong beside those functions. A deadline, cheaper supplier or executive preference cannot overrule a failed factual, employment, legal, privacy, accessibility, rights or security gate.

Move the source through six controlled states

The approved version moves through six states from intake to controlled release. Each state has a gate, and a later edit cancels affected approvals.

State	Gate	Typical internal target
intake	factual owner supplies source documents, dates and quotation authority	1 working day
evidence review	claims owner marks fact, opinion, proposal and unknown	2 working days
rights and data check	rights owner records permission and privacy reviewer maps data purposes	2 working days
format production	accessibility owner selects formats against actual user tasks	3 working days
approval	named owners sign the exact version they reviewed	2 working days
controlled release	publisher records version, channel, authority, timestamp and result	approved date

These targets are typical examples, not fixed service levels. The accountable owner sets the actual service level.

For Cedar Vale, intake returns an unsourced consolidation figure. Evidence review marks it unknown. The rights and data check clears photographs but flags employee contact data. Format production creates an intranet page and an audio version. Approval signs version three. Controlled release posts that version to the employee lane and holds the external statement.

Build an evidence-led source copy

The fact owner classifies each statement as observed fact, proposal, opinion, forecast or unknown. Objective commercial claims need a separate substantiation decision.

Evidence-led source copy

Classify statementfact, proposal, opinion, forecast, unknown
Substantiate objective commercial claims separately
Confirm quotation text and named-use authority
Limit confidential facts and resolve disclosure tension
Record creator, owner, licence, channels, territory
Log duration, permitted edits, attribution, withdrawal
Missing right stops asset, not independent factual text

Under CAP Code Section 3, marketers must hold documentary evidence before distributing claims consumers are likely to regard as objective and capable of substantiation.

The rule applies within its remit, so the advertising reviewer must first classify the communication and channel.

Quotations need the speaker's approved text and authority for the named use. Do not convert notes from an employee conversation into an attributed quotation. Confidential facts require an audience limit and a route for resolving tension between timely communication and restricted disclosure.

Rights review follows the asset, not the invoice. The IPO's ownership of copyright works page says a commissioned work's creator is normally first owner unless agreed in writing.

Cedar Vale should record creator, owner, licence, channels and territory for each photograph, graphic, recording and supplied passage. It should also log duration, permitted edits, attribution and withdrawal.

A missing right stops that asset; it does not stop factual text that can proceed independently.

Keep personal information and channel permission separate

Map employee details, consultation responses, media contacts, customer records, survey answers and system logs by purpose. The ICO's data-protection-by-design guidance was updated on 5 February 2026 following the Data (Use and Access) Act 2025. It calls for privacy to be considered from design through decommissioning. The page does not select Cedar Vale's lawful basis, roles or retention.

Direct contact requires another decision. ICO direct-marketing guidance, updated on 28 April 2026, says promotion of aims and ideals may count as direct marketing and connects the activity to data protection and PECR. A service notice, employee communication and promotional email must not be merged merely because one platform sends them.

Record the eligible recipient, source of contact data, purpose, legal review, suppression or objection state, approved channel and expiry. The publisher receives only the minimum approved list. If the purpose changes, stop and reassess rather than reusing the data by convenience.

Produce formats around recipient tasks

The accessibility owner asks what each group must understand or do. An employee may need to read detailed proposal information and respond. A customer may need to identify whether service changes affect them. A public page may need to preserve the approved facts while allowing navigation by assistive technology.

GOV.UK's accessible communication formats guidance, updated 17 June 2026, discusses planning with audiences, using appropriate alternatives and briefing suppliers with final approved text. It is government communication guidance, not a private-sector compliance verdict. Cedar Vale needs its own qualified accessibility and equality review.

For each format, keep the source-copy ID, reading order, headings, link purpose, captions or transcript, language, tester, test method and correction route. An accessible variant is a controlled version, not an informal derivative. If facts change, every affected format returns to review.

Rehearse without creating a false release

A controlled rehearsal should use synthetic records or a specifically authorised non-public fixture. Production destinations stay disabled. The team can inspect whether approvals bind to the correct version, access is limited, formats are retrievable, timestamps use the agreed timezone and a correction can be issued without pretending that an announcement went live.

Security evidence needs its own owner. NCSC logging guidance recommends starting with the questions logs need to answer, then identifying sources, retention and protection. A release record should be resistant to casual alteration and useful for reconstructing who did what. That guidance does not prescribe Cedar Vale's system or retention period.

Where suppliers participate, procurement records identity, service scope, data terms, support, change, continuity, export, deletion and exit. The NCSC's supply-chain assurance guidance supports contract-linked reporting, review and action on findings. It is not a supplier endorsement. A successful demonstration does not compensate for an unresolved contract, rights or privacy issue.

Release one approved version

The release authority signs the source hash and each channel variant after specialist gates pass. Publishing then records the actor, time, timezone, destination and technical result. Distinguish submitted, accepted by a system, displayed, corrected and withdrawn states. None proves that an employee, investor, customer or journalist read, understood or agreed with the content.

Monitor what Cedar Vale controls: version availability, broken destinations, accessible alternatives, delivery errors, factual challenges and correction status. Audience response and organisational outcomes require separately designed research. Do not attach a business result to the release log.

Design correction before it is needed

Anyone receiving a factual challenge needs a visible route to the correction owner. That owner freezes reuse, records the disputed statement and alerts the relevant factual or specialist reviewer. Personal-information issues require their own handling. The ICO's accuracy principle guidance discusses source status, challenges and rectification and is marked under DUAA review. It does not govern every non-personal statement.

Keep a correction route beside release, so a wrong version can be withdrawn without waiting for the next scheduled review. Monitoring should look for wrong versions, inaccessible copies, broken destinations and factual challenges.

A correction record links old and new versions, explains the change, identifies controlled copies and notes whether withdrawal succeeded. The organisation should not silently replace a material statement and erase the evidence trail. Failed corrections enter an exception queue with an owner and next review point.

A wrong date appears in a supplier briefing. The correction owner withdraws that version, releases a replacement and archives both versions with approvals, evidence and retention proof.

Cyber incidents require coordinated but fact-bound communication. NCSC guidance on effective communications in a cyber incident is intended for UK organisations before, during and after an incident. Technical, legal and regulatory owners retain their decisions while communications manages authorised wording and channels. The guidance supplies no universal timing or notification conclusion.

Close the job and retain only justified evidence

Close-out is an operational state, not the moment interest fades. The records owner confirms which source material, approvals, released versions, test evidence, corrections, complaints and decisions must remain accessible, to whom and for how long. Personal information follows its documented purpose and retention decision. Rights restrictions can also limit reuse even where a copy remains in the archive.

Close only after the archive holds approvals, source evidence, released versions, corrections and retention proof.

Supplier exit should prove account transfer or closure, usable export, access removal, agreed deletion and continuity for records the buyer must retain. Unresolved export or deletion evidence keeps the job open. A future reuse begins as a new decision if the facts, audience, purpose, channel, licence or guidance have changed.

The publication verdict remains HOLD until named corporate, employment, legal, advertising, privacy and PECR, accessibility, security, rights, finance, procurement and editorial reviewers complete the applicable gates. Recheck the source dossier and every cited official page on the real release date. Only the owner who accepted a failed gate's replacement evidence may authorise restart.

Before you act

Define the job and record what is outside scope.
Assign functions with real stopping power and name deputies.
Build source copy with evidence IDs and expiry dates.
Separate personal information and channel permission by purpose.
Produce formats around recipient tasks and test them.
Rehearse with synthetic records and keep production disabled.
Open an employee lane before external wording.
Move the authorised version through six controlled states.
Keep a correction route beside release and freeze reuse on a material error.
Maintain an exception register and confirm version, evidence, decision and deadline with receiving owners.
Close only after the archive holds approvals, evidence, released versions, corrections and retention proof.

Common questions

What should a job record include before any document is opened?

It should identify the legal organisation, proposal status, affected England operation, intended recipients, purpose of each communication, factual owner and final decision authority. It should also state what is outside scope. Public relations, marketing, investor relations, customer service, statutory notices and incident communication may share channels but do not share one approval route.

How should quotations and confidential facts be handled?

Quotations need the speaker's approved wording and permission for the named use, and notes from employee conversations must not become attributed quotes. Confidential facts need a limited audience and a way to resolve tension between speed and restricted disclosure.

What does a controlled rehearsal require to avoid a false release?

Use synthetic records or an authorised non-public fixture, and keep production destinations switched off. The team then checks that approvals bind to the right version, access is limited, formats are retrievable, timestamps match the agreed timezone and a correction can be issued without implying a live announcement.