Ways to provide the information Visual and Interactive Methods Not everyone is comfortable or capable of reading long, text-heavy privacy notices. Infographics, videos or cartoons can be used to visually explain how personal information is collected, used, and protected. They can be embedded on the NHRI website or shared via social media. Verbal over the phone and in-person explanations Over the phone, an NHRI can have an interactive voice recording or train staff to provide brief but crucial information. The same could occur in workshops or group sessions. Physical signs or posters Where there are aid centres, health clinics or other community spaces, posters or signage can serve as awareness if information is being collected in these places. Data minimisation (or only collecting what you really need) The NHRI should identify the minimum amount of personal information needed to fulfil their purpose. They should hold that much information, but no more. Putting it into practice In maintaining contact with HRDs an NHRI may need contact details and basic information documenting their contact with the NHRI, for example notes from phone calls. Collecting unnecessary personal details or documents (e.g., photocopies of passports or driver licences, family background, income, employment history or medical history) is not only overly intrusive, it places the NHRI at heightened risk of being the source of harm to HRDs in the event that there is a data breach. Remember: you can’t lose what you don’t have. Data Protection Guidelines for NHRIs Toolkit 10

Select target paragraph3