Privilege Access Management (PAM) software is a type of software tool available to manage access based on job titles, or roles and responsibilities within an organisation. Clear Internal Data-Sharing Policy: Create a short, clear policy document outlining when and how data can be shared internally. This might include a requirement for redacting or masking personal information in internal presentations or documents if names and other identifying data is not essential. Make sure all staff know about the policy. Specify that HRD data, for example, requires additional approval before sharing internally and externally. There are logging and monitoring software tools that can track who accesses data and when. The NHRI should deploy these tools if they have the resources and skilled staff to use them. Data Protection Guidelines for NHRIs Toolkit 13