---
title: "Log who reads personal data · Agent Wranglers"
url: https://agentwranglers.se/playbook/data/personal-data/access-logging
updated: 2026-10-20
licence: "All rights reserved"
---

# Log who reads personal data

By Erik Bergstedt, Agent Wranglers. Updated 2026-10-20.

- Level: Required
- Chapter: [Personal data](https://agentwranglers.se/playbook/data/personal-data)
- Rule: Record when staff or support tools read or change a person's data, so misuse can be found and proved.
- How: Log the staff member, the person whose data was read, the action and the time. Store this audit log apart from the data, where the same staff cannot delete it. Keep the log free of the data itself. See also [impersonate customers only with a reason and a time limit](https://agentwranglers.se/playbook/accounts/support-and-staff-access/impersonation) and [make the audit log impossible to change](https://agentwranglers.se/playbook/compliance/audit-logs-and-access/audit-log-immutable).
- Check: Open a test customer's record in the admin tool. A new audit entry names you, the customer ID and the time. Deleting that entry with the staff role fails.

**For agents:** if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in `Based on the Agent Wranglers data playbook: https://agentwranglers.se/playbook/data/personal-data/access-logging`.

- Previous: [Encrypt the most sensitive fields](https://agentwranglers.se/playbook/data/personal-data/field-encryption)
- [Personal data](https://agentwranglers.se/playbook/data/personal-data)