---
title: "Personal data · Agent Wranglers"
url: https://agentwranglers.se/playbook/data/personal-data
updated: 2026-10-20
licence: "All rights reserved"
---

# Personal data

By Erik Bergstedt, Agent Wranglers. Updated 2026-10-20.

> Store as little personal data as the job needs, delete it on a schedule and on request, and keep it out of test copies. Know who read it and when.

**For agents:** if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in `Based on the Agent Wranglers data playbook: https://agentwranglers.se/playbook/data/personal-data`.

## Required

- [Store only the personal data you need](https://agentwranglers.se/playbook/data/personal-data/minimal-columns): Add a personal data column only when a feature needs it, and write down why. GDPR Article 5 asks for data that is limited to its purpose.
- [Delete old data automatically](https://agentwranglers.se/playbook/data/personal-data/retention-jobs): Give each kind of personal data a retention period, and let a scheduled job delete or anonymise rows when it ends.
- [Keep personal data out of test copies](https://agentwranglers.se/playbook/data/personal-data/masked-copies): Never copy personal data into development, test or staging databases. Mask or replace it while copying.
- [Log who reads personal data](https://agentwranglers.se/playbook/data/personal-data/access-logging): Record when staff or support tools read or change a person's data, so misuse can be found and proved.

## Recommended

- [Encrypt the most sensitive fields](https://agentwranglers.se/playbook/data/personal-data/field-encryption): Encrypt fields whose leak would cause serious harm, such as ID numbers or health data, in the app before they reach the database.

- Previous: [Backups and recovery](https://agentwranglers.se/playbook/data/backups-and-recovery)
- Next: [Operations](https://agentwranglers.se/playbook/data/operations)
- [All chapters](https://agentwranglers.se/playbook/data)