Elementum

Contract and Data Safeguards Guide.

Build a simple discipline for two everyday risks that quietly sink organizations: contracts signed without understanding the obligation, and sensitive data held without protection.

In Find and Manage Your Risks, after your insurance is matched to your risks.

Contracts

Which contracts you read carefully yourself and which get an attorney’s eye before signing (as a rule, anything with a large financial commitment, a liability or indemnity clause, a long term, or a promise you are not sure you can keep)

Who is allowed to sign what, so no one commits the organization beyond their authority

A file of signed contracts with their key dates and obligations, and renewals and deadlines on your compliance calendar

Data

Take stock of the sensitive data you hold: donor information, and information about the people you serve, which can be especially sensitive

Set basic protections: who can access it, how it is stored and backed up, and how it is disposed of

Decide, before you need it, what you would do if data were lost or breached, including any duty to notify the people affected. Where you handle especially sensitive information (health, children, immigration status), confirm the specific rules

A significant or unusual contract is an attorney’s review, not a guess. The systems and technology your data lives on, the database, the backups, the access controls, are built in operations and systems; this tool sets the protections, that work builds the machinery.

Your answers stay in your browser on this page and are never sent anywhere. Use Save or print to keep your copy.

Back to Find and Manage Your Risks, or start over from the welcome page.