Having a process and appropriate security measures to manage your personal information is key. Nearly all breaches involve Principle 7 alongside some of the other principles
- What processes do you have in place at the moment to protect personal information?
- What security measures do you have in place at the moment to protect personal information?
- What training do you have in place at the moment to ensure that staff understand their responsibilities to protect personal information?
- Is this sufficient?
- If required to demonstrate compliance, how would you do it?
Enter your answers in your notebook below