CRM and customer data.
WHAT THEY HOLD
Names, contact details, history, communications, sometimes financial information.
WHAT THAT MEANS
Personal data, with obligations attached.
WHAT TO ESTABLISH
What you actually need to record Who can access it Who can export it How long it is kept
THE EXPORT RESTRICTION
Bulk export of customer data should be restricted and logged.
That is how customer lists leave a business.
WHAT TO CONFIGURE
Individual accounts with appropriate permissions A second authentication step Restricted deletion
WHAT TO BACK UP
Regular exports, held securely.
WHAT TO REVIEW
Whether data past its purpose is being deleted.
WHAT TO RECORD
That the service holds personal data, in your data inventory.
WHAT TO CHECK IN THE PROVIDER'S TERMS
What they do with the data Where it is held Their breach notification process
WHERE TO READ MORE
Our data protection material, and take advice on your obligations.
