Workforce data governance

Minimise access

Workforce registries can contain identity, employment, qualification, and document data. Limit sensitive fields to roles that need them, and separate operational reporting from unrestricted record access.

Corrections

Prefer auditable corrections over direct database edits. Preserve who changed a record, what changed, and why when the data has already been used operationally.

Retention and offboarding

Define what remains after a worker leaves, which documents must expire or be deleted, and how integration tokens and user sessions are revoked. Backups must follow the same security expectations as the live database.