How much personal information should the family share?
Share what the relevant party needs, through an agreed secure process, at the appropriate stage. The MYBA 2025 changes described by Hill Dickinson include KYC documentation and sanctions-related provisions, so legitimate identity checks should be distinguished from unnecessary circulation of family information. (hilldickinson.com)

- Practical distinction:
Our recommended separation is:
| Information | Suggested handling |
|---|---|
| Initial sourcing brief | Anonymous guest groups, age bands and functional requirements |
| Booking and compliance identity | Verified recipient and agreed document-transfer process |
| Dietary and medical requirements | Restricted to people who need the information to prepare or respond |
| Travel and security arrangements | Limited distribution and explicit sharing instructions |
| Finance documents | Restricted to transaction approvers and verified counterparties |
Ask who can access the documents, which third parties receive them, how long they are retained and how changes or deletion requests are handled.
Do not omit information genuinely needed for lawful operation or safe preparation. Instead, ask the broker to explain its purpose and route it appropriately.
Practical distinction: the general preference sheet should not become an unrestricted repository for passports, payment documents and detailed medical histories.