Guidelines to protect sensitive information while maintaining useful documentation.
Privacy, Confidentiality, and Data Protection
Guidelines to protect sensitive information while maintaining useful documentation.

Privacy Principles

Prioritize privacy by limiting access to information on a need-to-know basis. Redact identifying details where appropriate, and store data in secure systems that trace access.

Comply with regulatory requirements and internal policies. Document how personal data was collected, stored, used, and disposed of. Include a privacy impact assessment when required by policy.