Review personal data inventory process
Updated by Brett Smith 4 months ago
I understand there's a lot of ground to cover here, but I think this document is too high-level to be useful to anybody in its current form. In order for anybody to have any hope of creating a useful inventory, there needs to be a lot more guidance about what the inventory is expected to cover. What systems do we know we need to survey? What retention periods do we want to follow for different types of data? Can we normalize the fields of data that we expect we store across different systems? What does the retention period mean for communications like email, RT tickets, Slack? One list of "types of systems" and one row of table headers isn't sufficient for other people to know what's required.