What are two ethical considerations when using open-source intelligence (OSINT)?

• A. Respect privacy and legal restrictions; verify sources and avoid misrepresentation.
• B. Loot confidential data and publish anything found.
• C. Publish all OSINT without verification.
• D. Ignore privacy because the information is public.

Answer: (C)

Ethical OSINT work hinges on two principles: respecting privacy and legal restrictions, and verifying sources to avoid misrepresentation. Even when information is publicly accessible, you must consider privacy expectations and applicable laws—data protection rules, harassment statutes, and platform terms can all limit what you should collect, how you use it, and how you share it. Alongside this, never publish or act on information without corroboration; verifying across multiple independent sources helps prevent spreading false or misleading material and protects against harm or damage to someone’s reputation.

By contrast, looting confidential data or publishing everything found would violate privacy and often the law; publishing all OSINT without verification can propagate misinformation; and ignoring privacy simply because information is public misunderstand the ethical and legal boundaries that still apply.