Build a personal-information inventory from the systems the client names
Key facts
- Human involvement
- YellowClose supervision
- How AI is used
- From the system list and interviews the lawyer supplies, record the category, the purpose, whether the client says the information is sold or shared, and the stated retention. Decide nothing about whether the notice is lawful.
- What the lawyer must review
- Civil Code section 1798.100 requires a business that controls collection to tell the consumer, at or before collection, the categories, the purposes, whether the information is sold or shared, the sensitive-information categories where relevant, and the retention period or the criteria used to set it. Collection must be reasonably necessary and proportionate to the disclosed purpose. The inventory is the factual list those duties are checked against. It is not a GDPR record of processing, and it is not the notice. Opinion 512 and Model Rule 1.6: the inventory holds client and consumer information.
- Written for / version
- United States versionUS
Who does what
| Role | What they do |
|---|---|
| Assistance | Consider narrowly defined preparation support after confirming the tool’s capability and permitted scope. |
| Lawyer | Set the scope, supervise the work closely, verify every part relied on, resolve omissions and exceptions, and approve the exact output. |
Checklist
- Confirm that the actual tool, feature and processing terms permit use of this information, including access, retention, training and disclosure conditions.
- Confirm the output against the client’s instructions and the complete relevant source material, including omissions or contradictions.
- Resolve exceptions and record the responsible lawyer’s approval of the exact output and intended use.