I just read through this thread and saw some huge red flags about the information in the Rolodexes. Some of this is very sensitive and may be illegal outside of a secure filing system, and you need to bring it to the attention of someone in HR or legal for advice on what to do. Here is my take (for what it's worth):
Personal information: Any card with personal identifying information such as dates of birth and socials should not sit on top of anyone's desk. Verify that the data is in the appropriate database (personnel, payroll, client/patient) and then shred the card. If you don't have access to the proper database, shred the card, as you should not have access to it.
Login IDs and passwords: Enter these into a spreadsheet and lock it. If it is for one of their personal accounts, shred the card and don't enter it into the spreadsheet, as it is their personal information. If it is a business account, verify that the ID and password still work. If you have been given access to the same system, you can shred their ID and password as you would never need it, and it has likely been disabled. If it is not disabled, bring it to the attention of management/vendor to delete it.
Internal Contacts: enter appropriate information in your email contacts (Outlook, etc.) Do not include things like DOB (birthday without the year is ok if you want to recognize birthdays) or SSN.
Clients/Patients: Ensure they are entered into the CRM or HMIS system. Update as necessary and shred the card.
Vendors: These should be entered/updated in the email system, like internal contacts. Depending on your CRM set-up, they might go there instead.
Donors: Enter/update them in the CRM or donor tracking system (depending on what you use).
To streamline this, you may want to take part of the Rolodex each day and separate them into those types of categories. Then, follow the above guidelines to do multiple inputs into the same systems simultaneously. Once the data is entered into the appropriate system, shred the card, especially those with sensitive identifying information or account numbers. Hopefully, you have access to a cross-shredder, as you are sitting on a liability powder keg.
Share your insight
Join an authentic community that helps women support each other at work. Share your professional experience or ask for advice — you can even post anonymously.
14 Comments
Join the conversation