Remove clutter before encryption
Encryption protects the files placed inside it; it does not decide which files should exist. Cleanup should find duplicate scans, exports, email downloads, temporary image-editor files, cloud sync copies and documents containing unnecessary identity details. Preserve evidence of the decision without copying the sensitive content into the cleanup log.
A photographer finds six copies of one release across Downloads, a job folder and two synchronized drives. Two are unsigned, one contains an unneeded ID image and one is the signed final. Hashes, dates and the client record identify the retained copy; duplicates are retired using the studio’s approved process.
Use a controlled sequence
- 01Pause synchronization and editing so the inventory does not change during review.
- 02Group files by job, model and release version without relying on filename alone.
- 03Compare signatures, dates, usage terms and amendments before choosing the retained record.
- 04Remove unnecessary identity fields from future collection forms rather than altering signed evidence.
- 05Document disposal candidates and obtain any required legal or client approval.
Record the decision without copying the risk
Keep a cleanup register with source location, file category, duplicate relationship, selected authoritative copy, approval, disposition method and completion date. Store hashes when useful; never put passwords or full identity values in the register.
Stop and investigate when
- The newest timestamp is assumed to be the signed final.
- Cleanup deletes files subject to a dispute, hold or client instruction.
- Temporary exports remain in Downloads or a shared desktop.
Storage protection is not legal authorization
Does not replace provider permissions, guaranteed backup, password recovery or enterprise identity management. Model-release requirements vary by intended use, platform, contract and jurisdiction. Obtain qualified advice for legal conclusions.
Questions commercial photographers ask
Can I redact a signed release and call it the original?
Preserve the signed record as required. A redacted working copy should be labeled and linked to the authoritative version.
Does emptying the recycle bin guarantee sanitization?
No. Logical deletion is not the same as media sanitization, especially on synchronized or solid-state storage.
Evidence for this decision
These sources support specific handling decisions. They do not provide universal legal advice or imply endorsement.