Do you periodically check user access to ensure their access matches their responsibilities? A Do you periodically check user access to ensure their access matches their responsibilities? Access permissions are checked regularly and also as part of any job role change within the company. Where your staff have access to the personal data of ours, is there a confidentiality clause in their employment contracts?Do you have a documented procedure which details a plan of action in the event of a breach of data protection legislation?