# DRAFT — Vendor data review brief

DataGovernance.ca original planning worksheet. Not legal advice, certification or a completed review.
Keep sensitive information in an approved internal environment.

## 1. Purpose and minimum fields shared

Evidence or decision owner: [to confirm]
Notes and uncertainties: [complete internally]

## 2. Data flows and receiving systems

Evidence or decision owner: [to confirm]
Notes and uncertainties: [complete internally]

## 3. Permitted secondary use, training and processors

Evidence or decision owner: [to confirm]
Notes and uncertainties: [complete internally]

## 4. Locations and access restrictions

Evidence or decision owner: [to confirm]
Notes and uncertainties: [complete internally]

## 5. Return/deletion on exit and known residual copies

Evidence or decision owner: [to confirm]
Notes and uncertainties: [complete internally]

## 6. Specialist review and approval authority

Evidence or decision owner: [to confirm]
Notes and uncertainties: [complete internally]

## 7. Unanswered questions with owners

Evidence or decision owner: [to confirm]
Notes and uncertainties: [complete internally]

Approval status: NOT APPROVED
Next review: To confirm