When an organization collects any type of personal information, it is responsible for safeguarding the data from loss, misuse, modification, unnecessary disclosure and unauthorized access. When gathering data, keep in mind that some types of information may not be considered “personal information” on its own. However, when combined with other types of information, it might be necessary to safeguard it. By understanding the dynamic nature of the information kept within your organization and knowing how to protect personal information, you ensure the security of those who trust the services the organization provides and ensure compliance with privacy laws.