multnomah-fellowship / planning

A repo to contain the issues for our Waffle planning board
1 stars 0 forks source link

Document any relevant policies about privacy / security #41

Open alsomanya opened 7 years ago

alsomanya commented 7 years ago

I'd like to put together answers to the following (likely as a viewable Google Doc to start):

  1. What information about victims do we store? Why do we store this data? (answer: storing the most minimal amount of data per XYZ standards)
  2. How long do we store this data? Do we need to store it indefinitely?
  3. Who has access to this data? What criteria will we use to determine who has access to it? (i.e. we use XYZ standard for access)
  4. Do we do anything to safeguard this data? (i.e. encryption?)
  5. Who has access to victims' text messages? What criteria will we use to determine who has access to it?

I'm happy to assign this to myself & write something up as a draft (though @tdooner I'll have lots of questions for you!) I'd also be happy to tap Mikela and John for their expert opinions on what we could do that's minimal, and will satisfy any concerns that stakeholders may have.

alsomanya commented 7 years ago

Oops, looks like I can't assign issues. @tdooner could you make me a collaborator / admin? Thanks!