Kieran McDonagh outlines a process for protecting your sensitive data. There are many sensitive information that is critical to their day-to-day operations. Personnel departments must maintain details of employees’ bank accounts that must be protected from external disclosure but also from disclosure to unauthorised staff. Fundraising departments often depend on personal and financial information about benefactors, while operational departments often maintain lists of volunteers’ home addresses. Those charities that deliver a care service can find that they need to maintain records about beneficiaries to provide accountability for funding from the statutory sector. To complicate things further, charities will also require third-party suppliers to handle and process much of this sensitive information.