Keeping your personal information safe

Personal data is information that relates to an identified or identifiable individual. You may not always be identified by one piece of information alone sometimes; several pieces of information can be combined to identify you.

That means the information you share, however harmless it may seem on its own, can potentially become much more revealing when combined with other information.

Stop. Think. Then Share.

We live in a world where personal information has real value. Organisations may collect information about you for a wide range of purposes, including providing services, processing transactions, communicating with you and, in some circumstances, marketing.

But that doesn't mean you should automatically hand over every piece of information you're asked for.

The Information Commissioner's Office (ICO) recommends taking a moment to consider who is collecting your information, what they intend to do with it, whether they actually need it, and what the consequences could be for you.

So, before giving out your personal information whether online, over the phone or even at your local coffee shop STOP and THINK.

Ask yourself: Who is asking for my information?

Make sure you know who you're dealing with and, where appropriate, check their privacy notice.

Why do they need it?

There should be a clear reason for collecting your personal information. If you're not sure why a business needs particular information, ask.

Do they really need all of it?

The ICO's data minimisation principle says organisations should only collect personal data that is adequate, relevant and limited to what is necessary for their stated purpose.

You don't need to provide additional information simply because a form asks for it.

What will happen to my information?

Check the organisation's privacy notice. It should explain who is collecting your information, what it will be used for and, where relevant, whether it will be shared with other organisations.

What could happen if I disclose it?

Think carefully before providing sensitive or valuable information. Once information has been shared, you may have less control over how it is used.

Personal Data Is More Than Your Name

Personal data isn't limited to your name and address. The ICO explains that personal data can include identifiers such as a name, identification number, location data or online identifier. An individual may also be identifiable indirectly by combining information with other information that is available.

This means seemingly ordinary information can become personal data when it can be linked to an identifiable individual.

Keeping Your Information Safe

Protecting personal information isn't just about being careful when you hand it over. Security matters too.

The ICO's security principle requires personal data to be protected using appropriate technical and organisational measures, taking account of the risks involved.

For individuals, that means taking sensible precautions when sharing information online or in person.

For organisations, it means having appropriate measures in place to protect the personal data they hold.

A Simple Rule to Remember

Before giving away your personal information, remember:

STOP. THINK. CHECK.

• STOP — Don't automatically provide information just because you're asked for it.

  
  

• THINK — Ask yourself why the information is needed and whether you are comfortable providing it.

  
  

• CHECK — Look at the organisation's privacy information and understand what will happen to your data.

Good data protection starts with awareness. Your personal information belongs to you. Don't make it unnecessarily easy for others to collect, use or share it.

To find out more about how we can help your organisation review and Data Protection and security controls, contact us at info@sarsearonconsulting.com