the creation of employee privacy policies
changing and more stringent rules on HR data
'least privilege' access rules to HR data - restrictions on access
to HR data
restrictions on employee references
restrictions on background checks
changing and more stringent records management practices
implementation of data retention and data destruction policies
employee access to their own data
If you have tried to get specific answers to these or similar questions such as
‘how much security is enough’ or ‘what is the best practice for protecting HR
data?’ from your auditors, then you probably have the same scar tissue on
your forehead as I do.
.
.