State the organisation's responsibilities in sourcing, sharing and storing information to ensure legal compliance. Identify two types of information which may have restricted access within the organisation.

Assessment Criteria

Response should make specific reference to data protection legislation and GDPR.

Response required two types of information with restricted access.