Purpose and relevance
Data protection begins with understanding why information is needed and whether its use is appropriate for that purpose. The context of collection matters when assessing later processing or sharing.
Lifecycle considerations
Access, storage, transfer and retention each introduce different questions. A coherent approach considers them together, with attention to sensitivity, permissions and the responsibilities of the parties involved.