Do you have an inventory of, or the ability to easily determine, the identity of each specific piece of PI collected and/or maintained by the DB/App such that you can copy or delete the PI on request, and can specifically identify its source, use (including purposes), and the parties with which it is shared (and their purposes for the data)?
Does the DB/App include Driver License Information?
Does the DB/App include Clinical Trial information?
Does the DB/App include Financial information governed by Gramm-Leach Bliley Act (GLBA) or CA Financial Information Privacy Act (CFIPA)?
Does the DB/App include Consumer Reports used in or for consumer reports under the Fair Credit Reporting Act?
Contact name of your organization responsible manager
Does the DB/App include Health information governed by Health Insurance Portability and Accountability Act (HIPAA) or CA Confidentiality of Medical Information Act (CMIA)?