Data minimisation
Collect only information that is necessary for the programme, safeguarding, legal or accountability purpose.
Sensitive information
Health, children’s data, identity records and other sensitive information require stronger access and retention controls.
Partners
Data-sharing responsibilities should be defined with delivery partners and service providers.
Incidents
Suspected data loss or unauthorised access should be escalated promptly and handled under applicable requirements.