Protecting privacy in community-support stories
Verify permission and minimise identifying sensitive details. Focus on the organisation’s work rather than using personal hardship for promotion.
Putting data and access into practice
Define purpose, scope, access and retention before collection. Public display, internal processing and sensitive information need distinct permissions.
Checking the result
Complete a workflow with minimal data and identify owners for access, correction and deletion. Responsible specialists must separately confirm applicable legal or sector requirements.
