When to use this
Practical use
Use this as a working artifact. Fill it with real owners, dates, decisions, evidence locations, and review status.
Use this to review whether PII handling, access, transfer, retention, and training controls remain appropriate.
Checklist
- PII purpose remains valid.
- PII collected is necessary for the stated purpose.
- Access is limited to job need.
- Access review completed and exceptions recorded.
- Transfers and suppliers are documented.
- Retention period remains justified.
- Staff handling PII have current training.
- Breach reporting route is known.
- Inventory updated for any change in use.
Related notes
- Template
- Iso27001
- Privacy
- Access review
Note Metadata
Aliases: PII Access Review Checklist
Source: 90 Templates/PII Handling and Access Review Checklist.md