Short answer
A private client story becomes a public quote only after four separate decisions: the facts are checked, the client or rights owner permits that use, the identification risk is tested beyond removing the name, and the speaker approves the wording. If any is unresolved, use a general lesson or hold the story.
TL;DR
- →Treat factual support and permission for public use as separate questions.
- →Check whether details can identify a client even after names are removed.
- →Draft the quote as a proposal and return it to the speaker and relevant rights owner.
During a private client review, an executive hears a vivid story about a hospital team reducing handoff delays. Weeks later, a writer places the story in an attributed conference quote, removes the hospital’s name and calls it anonymous. The combination of region, specialty and rollout date still points directly to the client, and nobody asked whether the discussion could be used publicly. A private story can become a public quote only after four separate decisions: the facts are checked, the client permits the use, the identity risk is tested and the speaker approves the wording.
Private case material can help a communications team understand a subject. That usefulness does not grant publication permission. The PRSA Code of Ethics frames this as client trust, which requires appropriate protection of confidential and private information1. Turning it into a public quote requires a chain of decisions about the facts, the intended use, the client’s identity, the speaker’s memory and the organization’s disclosure rules.
What should you record about a private case study before using it?
Where it came from, who provided it, when, on what terms and who may see it, then the separate factual assertions inside it and the details that could identify the client. Most PR teams already draw this line with AI tools: in Muck Rack's State of AI in PR 2026, 69% said they avoid entering personal data or proprietary material2.
Record where the story came from, who provided it, when, under which stated terms and who may access it. Preserve the original notes or recording according to the organization’s authorized process. Label your summary as a summary. If the account team cannot establish the terms, treat public use as pending rather than interpreting attendance at the meeting as consent.
Split the story into factual assertions: the client type, setting, initial problem, intervention, timing and observed outcome. Check each against an appropriate source and owner. A speaker remembering the conversation can confirm what they recall, but that memory alone may not establish the client’s measured outcome.
Map identifying details together. Removing a name may still leave a distinctive job title, city, project date or result. The risk is well documented for personal data: a NIST review of de-identification research notes that researchers have shown some de-identified data can sometimes be re-identified3. Treat a client described by region, specialty and rollout date with the same caution. Ask the client or rights owner to decide whether attribution, anonymized use, a composite, a more general lesson or no use is permitted. A composite should never be presented as one actual client’s experience.
What are the options for using a private client story publicly?
Four: use it named with approval, anonymize it after a real identification check, state the general lesson without the case, or hold it.
Named
Use the client and approved detail
Obtain approval for the exact facts, wording, attribution, channel and timing. Confirm who has authority to grant that use. A prior case-study approval may cover a web page while excluding an executive speech or press quote.
Anonymous
Remove identity with a real risk check
Agree which details can remain and test whether the intended audience could infer the client. Keep factual review and permission in place. “A client” is not a magic label that clears confidential material.
General lesson
State the principle without claiming a case result
The executive may discuss an approved operating insight without narrating the private event. Ensure the general wording does not smuggle in a result, prevalence claim or personal experience that has not been cleared.
Hold
Do not use the material yet
If authority, evidence or identity risk remains unclear, hold the story. Replace it with a public source, a clearly hypothetical example or no example. A weaker quote may be preferable to an unauthorized one.
QuoteIt keeps these strands apart. A spokesperson's voice comes from material they approved and is kept separate from the organization's facts, and from other clients' material. Wording that gives the speaker an experience, a view or a feeling is marked as proposed until they approve it, and the facts inside that wording are still checked against their sources.
How do you turn a private story into a safe public quote?
Remove the invented observation and the unsupported effect, keep only what the organization has approved, and send the result to the speaker and the client as a proposal.
Consider a fictional private case note: a regional clinic tested a scheduling process for six weeks and reported fewer missed handoffs in its internal review. The executive did not observe the work directly. The clinic has not approved external use. This scenario is invented to demonstrate the decision path.
A risky proposed quote says, “I saw how our approach transformed patient care at a leading regional clinic.” It invents personal observation, introduces a broad effect on care and leaves the clinic potentially identifiable; the observations hidden inside an executive’s view need checking like any other claim. Removing “regional” does not repair the other claims.
If the organization has separately approved the operating principle, a possible proposal is: “Scheduling changes matter when they make responsibility for the next handoff clear.” The sentence avoids claiming a client result and still needs the speaker’s approval plus a check against the organization’s current position, keeping the company’s voice and the spokesperson’s own distinct. If a concrete case is essential, the team should seek specific client permission and verified wording, with an approval that names the exact copy and use.
What should approvers see before a case study goes public?
The private source, the proposed wording, what was kept and removed, the remaining identification risk and the intended channels, with the client's decision recorded apart from the speaker's.
Show the private source, proposed public wording, facts retained, details removed, remaining identification risk and intended channels to authorized reviewers. Record the client or rights decision separately from the speaker’s acceptance of the quote. If either changes the wording materially, repeat the affected check.
The process can take longer than writing a fresh generic quote. It can also preserve the concrete human insight that made the story useful, the kind of detail that lets an executive quote add something to the story. The transformation record makes that tradeoff explicit: retain the case only when its evidential and permission decisions justify the detail it contributes.
Can you use a client story publicly if you remove the name?
Not by that alone. Region, specialty, dates and results can still identify the client. Test whether the audience could infer who it is, and get the client's decision on anonymized use.
Who approves a case study quote?
The client or rights owner decides whether the story may be used and how. The speaker approves the wording attributed to them. Fact owners confirm the claims. These are separate decisions.
Does approval for a web case study cover a speech or press quote?
Not necessarily. A prior approval may name a channel, a period or exact wording. Check its scope before reusing the material elsewhere.
What if the client has not approved external use?
Hold the story, or use a general lesson the organization has approved without narrating the private event. A weaker quote is better than an unauthorized one.
Sources
Numbers in the text point here. Each link opens the original page.
- 1PRSA Code of EthicsPublic Relations Society of America
- 2State of AI in PR 2026Muck Rack, 2026-01
- 3IR 8053, De-Identification of Personal InformationNational Institute of Standards and Technology, October 2015
Written by
Shruti Sharma, Founder and COO, QuoteIt
Shruti Sharma co-founded QuoteIt and runs its operations, to fix the part of PR work that comes after the draft: who signs off, on which version, and what the client actually approved. QuoteIt ties each approval to the exact wording it covers, keeps the client's sign-off separate from final release, and records who decided what and when, so a statement can be handed over, corrected or reused without reopening the mail trail.
How these posts are researchedSet up the spokesperson in QuoteIt from statements they approved. Their next quote is drafted from checked facts, and any experience or view it gives them waits for their approval.
Join the Pilot


