Protecting personal data

Personal data is any information about a real person: names, emails, addresses, ID numbers, health and payment details, even location history. Handling it carelessly harms people and can break the law. Good privacy habits protect both.

Collect and keep less

The simplest privacy rule is to hold less personal data. Only collect what the task genuinely needs, use it only for the purpose you told people about, and delete it when that purpose is done. Data you do not hold cannot be lost or misused.

Respect people's rights

People can ask what data you hold about them, ask for it to be corrected, or ask for it to be deleted. Know who in your organisation handles these requests and pass them along promptly rather than ignoring them.

Guard personal data in daily work

• Do not paste personal data into unapproved websites or AI tools.
• Do not move customer data onto personal devices or accounts.
• Mask or remove personal details when you only need an example or a test.
• Be careful with screenshots and screen shares that reveal other people's data.

Mind your own footprint too

The less you share publicly about yourself, your schedule, and your colleagues, the less material attackers have for impersonation and social engineering. Review the privacy settings on your accounts.

Quick rules

1. Minimum data, clear purpose, timely deletion.
2. Approved tools and systems only for personal data.
3. Route privacy requests to the right people quickly.