How do journalists protect confidential sources?
Through a combination of professional practice, legal protections and operational security — and journalists have gone to prison rather than identify a source, because the whole system depends on that being credible.
Why it matters. Sources disclosing wrongdoing frequently risk their jobs, their liberty or their safety. If confidentiality cannot be relied upon, they do not come forward, and a substantial category of public-interest journalism becomes impossible.
The legal protection in the UK. Section 10 of the Contempt of Court Act 1981 provides that a court shall not require disclosure of a source unless satisfied it is necessary in the interests of justice, national security, or for the prevention of disorder or crime.
It is a qualified protection, not absolute — courts can and do order disclosure — but the threshold is meaningful, and Article 10 jurisprudence from the European Court of Human Rights has treated source protection as essential to press freedom, requiring an overriding requirement in the public interest before disclosure is ordered.
The practical vulnerability is not the journalist. It is metadata and surveillance. A journalist can refuse to name a source; phone records, email logs, building access records and location data identify them without the journalist's cooperation.
The use of communications data to identify journalists' sources has been a significant controversy, and the Investigatory Powers Act regime includes safeguards requiring judicial approval where the purpose is identifying a journalistic source — protections introduced precisely because the earlier position was found inadequate.
What careful practice involves:
Meeting in person rather than communicating electronically.
End-to-end encrypted messaging, and secure drop systems that many outlets now operate — designed so the outlet itself cannot identify the sender.
Not recording identifying details, and keeping notes separate from names.
Considering how the source will be identified by inference — if only three people knew something, protecting the name protects nothing. This is the most common way sources are exposed, and it is a journalistic judgement rather than a technical one.
Advising sources realistically about the risk they are taking.
Whistleblowing law offers separate protections in employment, with conditions.