diff --git a/docs/en/observability/apm/apm-data-security.asciidoc b/docs/en/observability/apm/apm-data-security.asciidoc
index 4ff5d4facc..14fe5f3ac5 100644
--- a/docs/en/observability/apm/apm-data-security.asciidoc
+++ b/docs/en/observability/apm/apm-data-security.asciidoc
@@ -150,6 +150,10 @@ see <<apm-derive-client-ip>>.
 The capturing of this data can be turned off by setting
 **Capture personal data** to `false`.
 
+NOTE: This setting only prevents APM Server from capturing already ingested personal data.
+It does not prevent such data from appearing in ingestion logs where applicable.
+See <<apm-filters-in-agent,{apm-agent} filters>> for redacting data on ingestion.
+
 [discrete]
 [[apm-filters-real-user-data]]
 ==== Real user monitoring data