Data Protection: Personal Information Inventory

WellInformedClover avatar
WellInformedClover
·
·
Download

Start Quiz

Study Flashcards

6 Questions

What is the primary step in planning data protection for an organization?

Undertaking an inventory of personal information

What type of data records must be included in the inventory?

Both customer and employee data records

What is the purpose of classifying data according to its level of sensitivity?

To define the clearance of individuals who can access or handle the data

What is the next step after completing an inventory of personal information?

Classify data based on its level of sensitivity

What is the purpose of segregating highly sensitive data from less sensitive data?

To ensure highly sensitive data receives additional protection

How often should the inventory of personal information be reviewed and updated?

Regularly, as new data is collected or changes occur

Study Notes

Data Inventory and Classification

  • An organization must undertake an inventory of all personal information it collects, stores, uses, or discloses, including customer and employee data records.
  • The inventory should identify the types, sources, and uses of personal information (PI).
  • Data location and flow must be documented, including how, when, and with whom information is shared.
  • Risks that could affect reputation or legal compliance must be identified.

Classifying Information

  • Data should be classified according to its level of sensitivity after completing an inventory.
  • The classification level defines the clearance of individuals who can access or handle data and the baseline level of protection required.
  • Steps for classifying information include:
    • Completing an inventory of personal information
    • Classifying data based on level of sensitivity
    • Segregating highly sensitive data from less sensitive data
    • Instituting controls on access
  • Classification levels include:
    • Confidential
    • Proprietary
    • Sensitive
    • Restricted
    • Public

Learn about the importance of identifying and documenting personal information within an organization, including customer and employee data records, data location, and flow.

Make Your Own Quizzes and Flashcards

Convert your notes into interactive study material.

Get started for free
Use Quizgecko on...
Browser
Browser