Know what personal information you have in your files and on your computers.
- Inventory all file storage and electronic equipment. Where does your company store sensitive data?
- Talk with your employees and outside service providers to determine who sends personal information to your business, and how it is sent.
- Consider all the ways you collect personal information from customers, and what kind of information you collect.
- Review where you keep the information you collect, and who has access to it.