Privacy and secure handling of customer information are core requirements of the NSF system. The final legal/privacy wording should be reviewed before production launch.
Customer information is an important part of the NSF lending process. The system is designed to support controlled access, secure records and administrative accountability.
Customer and loan records should be protected through authenticated access, database controls and secure document storage.
Private customer and financial information is restricted to authorized NSF administrators according to their permissions.
Important administrative changes should be recorded in audit logs so that sensitive records remain traceable.
The production privacy notice must accurately describe collection, use, storage, retention and disclosure practices applicable to NSF and should be reviewed for compliance before publication.
