Know what data the programme needs.
The review should identify the minimum participant data, the purpose for each field, who can access it, how long it is retained and which market-specific requirements apply.
- Data fields and purpose
- Access and ownership
- Retention and deletion questions
- Market-specific privacy review

