closer look

What's Inside

• 1

  Identify personal information being handled by your business.

  You need to have a very clear definition of what is considered personal information.

• 2

  Put controls in place to protect the data.

  What measures do you have in place to protect this data?

• 3

  Have a system to respond to user requests about data and who you are sharing it with.

  You don't want a situation where a consumer realizes you have been collecting information about them that they are not aware of.

• 4

  Create a process for producing personal information reports.

  This is in case customers want a copy of the information you have on them.

• 5

  Create compliant processes of deleting personal data.

  Be careful not to delete data that is necessary to comply with existing data retention laws.