Cyber insurance application · Privacy policy and retention

How do I answer the cyber insurance questions about privacy policies and keeping records?

One form asks whether you publish a privacy policy a lawyer has reviewed and whether you have rules for keeping and destroying data.

Last read from the sources at the foot of this page.

Check my firm
01

What exactly does the form ask?

These are the forms' own words, with the form and page each comes from.

A publicly available privacy policy which has been reviewed by an attorney

Data retention, destruction, and recordkeeping procedures

Please provide details of how often you purge records that are no longer required:

02

What does it mean for a small firm?

Data you no longer need still counts if it is taken. Purging old records lowers the number you give on the records question too.

03

How do I answer it truthfully?

Find your privacy policy and note whether a lawyer reviewed it. Write down how long each kind of record is kept and when it was last cleared out.

04

What can an outside reading show, and what can it not?

Your privacy policy is on your public website, so anyone can read it.

Whether records are purged cannot be seen from outside.

Sources

Where does this come from?

Related
07 · Check my firm

See what is open before anyone else does.

We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.

What we readPublic sources only
Who sees itYou alone
Delivery72 hours from confirmation
Meeting firstNone
Reading requestPrivate
Problem: Enter your firm's name.
Problem: Enter your name.
Problem: Enter a full address, like [email protected].
Problem: That does not look like a website. Try yourdomain.com.

A person reads every request. Your outside reading comes by email within 72 hours from [email protected]. Privacy