Governance checklist

• Define the lawful and operational purpose for each field.
• Set retention and deletion rules before collection.
• Log access and corrections where appropriate.
• Use aggregate reporting that resists re-identification.
• Review vendors, integrations, exports, backups, and breach procedures.

This publication does not store employee or employer records.