Explain the documents which are considered as confidential and need complete privacy by any business house. What should be included in the confidential policy of the business house in this regard ?

For the managing the confidential and privacy, the first step in the process is to identify what constitutes confidential documents at the workplace, and what to share securely. For any business house the following documents are primarily considered as confidential and need complete privacy: (i) Customer's & Employees' Information Safe guarding of the personal data is information about an individual that can be used to identify him/her. Information like Aadhar number, Mobile numbers, Residential addresses, Name, credit card numbers, etc. can all be considered personal information. In India, by the majority of the business, the strong mechanism for safe guarding the personal information is not yet adopted. Even when the documents or data cease to be useful to the organisation, this doesn't mean that the information is no longer confidential. Control includes in such cases the data needs to be disposed of securely and cannot be placed freely on the public platform or mixed with other kinds of data in the office. In such cases the business should work with a trusted information destruction agency to physically destroy both electronic and physical data. The Customer's & Employees Confidential Information includes discussions about employee relations issues, disciplinary actions, impending layoffs/reductions-in-force, terminations, workplace investigations of employee misconduct, etc. (ii) Office Plans, Office IDs and Internal Procedure Manuals For every organisation internal planning & procedures is the key aspect for controlling business and the organisation should ensure the protection of the same. It is important to place the documents with detailed office layouts throughout offices to identify key exits in case of emergency but the other documents and forms related to internal processes and procedures should be kept electronically on secure network drives and encourage employees to limit print-outs. (iii) Contracts and Commercial Documents and Trade Secrets; In case of the business contracts, every detail of the arrangement should be treated with the utmost confidentiality for both organization itself and the third party's benefit. If the contract has a confidentiality agreement, it could be rendered obsolete if an unauthorised person got their hands on the physical copy of the contract. The contracts are full of commercially sensitive information such as the nature of the arrangement, the value of the services offered/received in the agreement, the names of the main contracting parties, etc. The business should avoid sharing contracts broadly unless strictly required, and limit physical copies; consider using tools to sign contracts electronically in order to reduce unnecessary print-outs. While these documents are some of the most important to securely store and shared, the easiest and safest way to reduce the risk of a data breach is to implement a secure document retention policy specific to organisation's needs. (iv) Trade secrets: The confidential business information as "proprietary information" or "trade secrets." Which is not generally known to the public and would not ordinarily be available to competitors except via illegal or improper means. Common examples of "trade secrets" include manufacturing processes and methods, business plans, financial data, budgets and forecasts, computer programs and data compilation, client/customer lists, ingredient formulas and recipes, membership or employee lists, supplier lists, etc. "Trade secrets" does not include information that a company voluntarily gives to potential customers, posts on its website, or otherwise freely provides to others outside of the company. If such Confidential information is available in the wrong hands, confidential information can be misused to commit illegal activity (e.g., fraud or discrimination), which can in turn result in costly lawsuits for the Company. The confidential policy of the business house should describe the type of information considered confidential and the procedure employees must follow for protecting confidential information and dealing with the confidential information.