What you learn:
- Identify required records and retention periods
- Understand privacy and data protection considerations
- Apply cross-border compliance practices
- Prepare for internal and external audits
Description:
Proper recordkeeping supports compliance and protects both employees and organizations. This module reviews data retention, privacy considerations, and reporting requirements across jurisdictions. You will explore templates for consistent documentation and audit readiness.
The course emphasizes practical steps to maintain accurate records while respecting privacy and confidentiality concerns.
Data minimization and purpose limitation
Collect only information that is needed to investigate and address harassment concerns. Avoid collecting unrelated data and delete anything that does not support the investigation after its conclusion.
Secure storage
Secure storage is critical. Use encryption at rest and in transit, strong access controls, and tamper resistant audit trails for all harassment records.
Access management
Access management ensures least privilege. Assign roles, enforce strong authentication, and regularly review who can view or modify records.
Confidential handling
Confidential handling of documents is essential. Where possible, pseudonymize data and maintain separation between files and notes used for internal investigation.