Collect the minimum data, control access, define retention and avoid exposing personal or confidential information. Apply this specifically to role-aligned skills, credible evidence, clear communication and ethical job-search decisions. Record the owner, evidence, decision and review date so another qualified person can verify the result.