Skip to content
IntermediateSeveral short sessions, with follow-up for provider requests

Personal Data Privacy Review

Inventory accounts, review permissions and recovery settings, verify exports, and track privacy changes without sharing credentials.

privacy-conscious usersidentity theft victimsremote workers

Workflow

  1. Build a limited account inventory

    Start with email, financial services, cloud storage, social accounts and devices you own or manage. Record service names, account purpose, review status and the location of official settings. Keep private identifiers out of the working notes.

  2. Review sign-in and recovery controls

    Open each service through a trusted address. Review sessions, connected apps, recovery methods and MFA or passkeys. Revoke access you can identify as unnecessary and investigate unfamiliar activity through the provider.

  3. Reduce unnecessary access and sharing

    Review app permissions, public profiles, shared links, ad settings and location access. Check the actual audience on representative files or posts after changing a setting.

  4. Verify exports before deleting accounts or data

    Identify records you must keep, request an export through the service and open representative files outside that account. Check whether other logins, purchases or subscriptions depend on the account before following the official deletion process.

  5. Check outcomes and schedule a review

    Verify important privacy settings from the appropriate viewer account and revisit unresolved requests. Record the review date, outcome and next action. If there is evidence of compromise, use the service recovery route and the relevant local identity-theft support.

Tools Used

Checklist

0 / 5 completed

Loading your checklist…

Inventory

Access

Validation

Retention

Review

Reference Materials

Account protectionTip

The FTC recommends protecting accounts and using appropriate recovery steps when personal information is misused. Choose recovery channels for your provider and jurisdiction.

Export and deletion are separateTip

Google documents that downloading data does not delete it, and that changes between request and archive creation may not be included. Verify the provider’s export coverage before deletion.

Privacy change recordTable

Record actions without collecting secrets.

CheckEvidence to keep
Service and scopeWhat account or data category was reviewed
Access changePermission removed or retained, with reason
VerificationWhat the intended viewer can now see
Follow-upOutstanding request and next review date
  • Prioritize recovery dependencies

    Email and password-manager access can affect many other accounts; review these early.

Safety Notes

  • Never paste passwords, recovery codes, full account numbers or identity documents into these tools.