Does your non-profit have personal information in its records that is no longer necessary to keep?
If your non-profit had people sign up for a newsletter and it stopped publishing the newsletter, the names and email addresses of those who signed up are no longer necessary.
Does your non-profit regularly review its antivirus software?
Antivirus software is a computer program that protects electronic information from illegal access, sharing, and corruption. To be effective, antivirus software must be updated regularly.
Does your non-profit regularly review the terms and conditions of the social media platforms it uses?
Terms and conditions are the agreement between a service provider and the service user. They set out the rules for using a service. Terms and conditions are often found in a link at the bottom of a website or within the settings.
Does your non-profit use social media, such as Facebook, LinkedIn, Instagram?
Social media includes websites and applications that let people communicate and share content such as stories and photos.
Does your non-profit’s privacy policy include rules about the personal information collected by its website?
A privacy policy is a document that describes how your non-profit deals with personal information. Dealing with personal information includes its collection, use, disclosure, and retention (storage).
Does your non-profit’s website collect information?
Websites can track personal information such as location information (GPS data), device identifiers (IP and MAC addresses), click stream data, browser history, bookmarks, user generated social network data (comments, ratings, likes/dislikes, Twitter stream), and customer service interactions.
Does your non-profit regularly change its passwords to access the personal information it keeps?
Password is an assigned code, word, or phrase required to access electronic records.
Is the personal information stored on your non-profit’s computers or online (such as on a shared virtual drive like Google) password protected?
Password protected means only those people who know the assigned code, word, or phrase can access the records.