Social media includes websites and applications that let people communicate and share content such as stories and photos.

A privacy policy is a document that describes how your non-profit deals with personal information. Dealing with personal information includes its collection, use, disclosure, and retention (storage).

Websites can track personal information such as location information (GPS data), device identifiers (IP and MAC addresses), click stream data, browser history, bookmarks, user generated social network data (comments, ratings, likes/dislikes, Twitter stream), and customer service interactions.

Password is an assigned code, word, or phrase required to access electronic records.

Password protected means only those people who know the assigned code, word, or phrase can access the records.

Encrypt means to secure data by making it unreadable except by certain people using an authorized device.

Digital/electronic records include all information recorded by a computer such as email messages, word processed documents, images, spreadsheets, and databases.

Limit access means only allowing certain people to look at paper records. At minimum, “limit access” means securely storing paper records behind a locked office door. More sensitive personal information, such as medical and financial records, should be kept in a locked cabinet. Only authorized persons should have access to the keys.

Paper records include all records in a physical (non-electronic) form such as printed documents and emails and hand-written notes.