Information planning

Know what information the task needs and who can use it.

Prepare these questions before adding private records, forms or connected tools.

Fields and purpose

List what is collected and why it is needed. Separate optional details and information that belongs in another approved channel.

People and vendors

Identify who may view, change or export records and the software, hosting and support providers involved.

Records and recovery

The organisation and qualified reviewers approve retention, correction, deletion and incident requirements. Name the people handling unresolved requests.

AI and test information

For a specific approved AI task, define permitted inputs, vendor settings, checks and human review. Use fictional examples for development until any real-data access is approved.

Find official privacy research links, read this site's inquiry disclosure or discuss the development task.