Privacy, retention and audit essentials
Configure information handling with clear purposes, visibility and human accountability.
Watch first
Captioned walkthrough using the real TASC screen
Do the task
Follow these steps in order
Map information by workflow
Document what each workflow collects, why it is needed and whether it is anonymous, confidential or identified.
Step 1: Map information by workflowSet role visibility
Grant access based on operational need and test the experience for every role.
Step 2: Set role visibilityApprove retention
Set retention based on documented legal, contractual and operational requirements.
Step 3: Approve retentionReview Passport sharing
Separate employer roster identity from the Passport information a worker is asked to share.
Step 4: Review Passport sharingVerify the audit trail
Confirm which supported create, edit, status and assignment events are recorded and exportable.
Step 5: Verify the audit trailPublish understandable notices
Explain information use before rollout and provide a clear route for questions, corrections and rights requests.
Step 6: Publish understandable notices
Check that it worked
- Every pilot field has a purpose
- Role tests prove both allowed and denied access
- Retention is approved and recorded
- The Audit Log and CSV export are accessible only to authorized administrators
If something goes wrong
A supervisor can see more worker detail than expected.
Review individual-status visibility, role permissions and module-level access before continuing the pilot.
The audit export lacks an expected event.
Record the gap and confirm module coverage before relying on it for an assurance claim.
Before you begin and supporting details
Before you begin
- Documented purposes for each pilot data type
- Approved retention requirements
- Named roles allowed to see individual information
- Worker-facing notices and question route