Handle Customer Information Thoughtfully

Collect what is needed

Do not request financial records, passwords, identification documents, or full customer lists through a public consultation form.

Use appropriate systems

Share client information only through agreed channels and limit access to the people who need it for the engagement.

Describe actual practices

Privacy notices and service descriptions should reflect the tools and data flows actually used.

Review retention

Agree what records need to be retained for the engagement and how unnecessary copies will be removed.

General process guidance. Project requirements and responsibilities depend on your business and service agreement.