Ways to provide the information
Visual and Interactive Methods
Not everyone is comfortable or capable of reading long, text-heavy privacy notices. Infographics,
videos or cartoons can be used to visually explain how personal information is collected, used,
and protected. They can be embedded on the NHRI website or shared via social media.
Verbal over the phone and in-person explanations
Over the phone, an NHRI can have an interactive voice recording or train staff to provide brief
but crucial information. The same could occur in workshops or group sessions.
Physical signs or posters
Where there are aid centres, health clinics or other community spaces, posters or signage can
serve as awareness if information is being collected in these places.
Data minimisation (or only collecting what
you really need)
The NHRI should identify the minimum amount of personal information needed to fulfil their purpose.
They should hold that much information, but no more.
Putting it into practice
In maintaining contact with HRDs an NHRI may need contact details and
basic information documenting their contact with the NHRI, for example notes
from phone calls. Collecting unnecessary personal details or documents
(e.g., photocopies of passports or driver licences, family background, income,
employment history or medical history) is not only overly intrusive, it places the
NHRI at heightened risk of being the source of harm to HRDs in the event that
there is a data breach.
Remember: you can’t lose what you don’t have.
Data Protection Guidelines for NHRIs Toolkit
10