Tool 10
ProposedPrivacy and Data Inventory
“What information do we hold, and where is it?”
What is the Privacy and Data Inventory?
Lists what an organization collects, where each piece lives, who can reach it, and how long it is kept. Helps an organization identify what information it holds, where it is stored, and where governance attention is needed.
- For
- Organizations
- Cost
- Free, with no account
- Status
- A defined concept or planned pilot that has not launched. The design is written down and nothing has been delivered. Two kinds sit here and the entry itself tells you which: a proposed pilot names its targets, and any target it names is a plan rather than a result; a proposed concept names none because none have been set.
What it does
How it will work.
This describes a tool that does not exist yet. It is proposed, and this is the design rather than a description of something you can open.
- 01
Walks through each form, system, and spreadsheet that collects something
- 02
Records where each item lives and who has access
- 03
Flags fields collected but never used, which are pure risk
- 04
Asks how long each item is kept and on what basis
- 05
Marks where governance attention is needed rather than prescribing a policy
What you walk away with
Yours, not HxDF's.
Whatever you make with a tool belongs to you. Sending anything to HxDF is always a separate choice.
An inventory you can maintain
A list of what to stop collecting
The places where a retention decision has to be made
Your data
Runs without an account. The inventory is about your data and stays with you.
Be clear
What this is not.
Not legal compliance advice and not a certification. Obligations vary by jurisdiction and program and belong with counsel.
Where this connects
If you want to go further.
A tool covers part of the ground. An audit covers the rest, with a person, and costs nothing.
- AuditData and Reporting AuditIn development
- ReadingData, Privacy and SecurityNothing published yet
While this is being built