Take Stock

Know what personal information you have in your files and on your computers.

• Inventory all file storage and electronic equipment. Where does your company store sensitive data?
• Talk with your employees and outside service providers to determine who sends personal information to your business, and how it is sent.
• Consider all the ways you collect personal information from customers, and what kind of information you collect.
• Review where you keep the information you collect, and who has access to it.