Privacy Policies: What and When Information is Collected

Privacy Policies in Recovery Housing > Privacy Policies: What and When Information is Collected


The first step in protecting privacy and confidentiality is limiting the amount of information that is collected. 

Many recovery homes use applications from other programs, or put unnecessary information into their application.

An application process should be limited only to information needed to make a determination if someone is eligible and a good fit for the program.

By examining the application and ensuring that only information needed is collected, and collected at the appropriate time, can help limit the amount of information that needs to be protected.

Also, examine other forms and documents to make sure that all of the information collected is pertinent to it’s purpose.  This is an extreme example,  but an organization doesn’t need to collect the resident’s social security number on a grievance form.  So, to reduce the risk that the information will get out, do not have a space on the form for them to put this information.

Finally, it is a best practice to develop a record retention policy. Find out how long an organization is legally required to keep records of residents.  Set and follow document retention policies, and appropriately destroy records on the defined schedule based on those policies.