This initial draft list of factors for consideration focusses on sensitive data handling from the perspective of the repository phase of the digital object lifecycle. To provide sufficient context this includes factors that are relevant beyond sensitive data, but it prioritises activities and functions that may imply a change to digital objects’ data and/or metadata with a consequent change to their sensitivity status. The events and intervention points imply a need to update provenance information and, depending on local practice, may imply a new persistent identifier, or an update to a version and change log information under the current persistent identifier.