Sort the Data Lifecycle Control Point

Sort each privacy move into the stage where it has the most leverage. Before collection During use and sharing Retention and end-of-life Write the specific purpose for the workflow Challenge whether each proposed data field is necessary Set role-based visibility and narrow default audience Put processor terms in place with the vendor before upload Define how the team will retrieve data for access requests Set a review trigger for how long identifiable records remain needed Delete or anonymise records once the purpose expires Document a legal-hold or exception path when ordinary deletion pauses

Sign up free — one personalized lesson every day, matched to your role and goals.

Already have an account? Sign in