Access should be limited to individuals who require the information, and appropriate storage systems should be used. Health information, contact details, photographs and other personal information must be handled carefully in accordance with applicable privacy requirements.