Agent WranglersPersonal data Required
Log who reads personal data
Record when staff or support tools read or change a person's data, so misuse can be found and proved.
How to do it
Log the staff member, the person whose data was read, the action and the time. Store this audit log apart from the data, where the same staff cannot delete it. Keep the log free of the data itself. See also impersonate customers only with a reason and a time limit and make the audit log impossible to change.
How to check
Open a test customer's record in the admin tool. A new audit entry names you, the customer ID and the time. Deleting that entry with the staff role fails.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers data playbook: https://agentwranglers.se/playbook/data/personal-data/access-logging.