13. How are you storing the information you hold on people accessing your service or organisation?

You may wish to check that the information you are providing is being held securely.

An organisation should be able to tell you how it is storing paper and electronic copies of paperwork. This includes how the information is secured, such as password protected electronic files, or in cabinets that are locked.

The organisation should be able to tell you who has access to information, and confirm that access is limited to those who need it. If everyone can access information irrespective of their role, then this is a concern. Information should also not be given to other parties without your consent.