Download Appropriate handling and use of client data

Appropriate handling and use of
client data
Client data constitutes the most sensitive information we interact with. By necessity we
must have this data for initial format assessments, mapping purposes, general database
testing, and for client specific validation testing. As such the following policies are
strictly enforced:
•
•
•
•
•
Extract file datasets are to be stored only in the client’s network folder in the
secured data directory.
Initial client datasets will be purged from the client data directories within 45
days of the completion of implementation.
Copies of client databases should be stored on network SQL instances, and never
on a local user workstation. This data will also be purged within 45 days of
project completion.
Extract data and client database information will never stored on portable storage
devices including laptops or demo PCs. Trainers and implementation teams
entering the field are required to check their laptops for the presence of any
sensitive client data before leaving the office. Any such data must be deleted or
transferred to network storage prior to departure.
Hard-copies of client data shall be shredded within 45 days of
implementation/project completion.
Last modified on 6/27/2006 9:08:00 AM
By Jason Watanabe