From 91dfb62b66cb8e137012ea528f21a393ae2c56de Mon Sep 17 00:00:00 2001 From: Neville Brown Date: Wed, 5 Aug 2026 16:53:22 +0100 Subject: [PATCH] Revise test data policy for sensitive information Updated policy to specify that sensitive data should not be used for testing and added requirements for data sanitisation and control. --- quality-assurance/test-policy.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/quality-assurance/test-policy.md b/quality-assurance/test-policy.md index 6bdf0573a..c42d7cfd3 100644 --- a/quality-assurance/test-policy.md +++ b/quality-assurance/test-policy.md @@ -33,4 +33,4 @@ Test processes may differ by team or project, according to individual circumstan ## Test data -It is the UKHO Policy that live data should not be used for testing. Where a copy of live data is used then its use is to be risk assessed and the data sanitised as appropriate, removing references to customers, employees and UKHO corporate proprietary information. +It is the UKHO Policy that sensitive data (e.g. personally identifiable information) should not be used for testing. Where a copy of live data is used, the data must be sanitised as appropriate, removing references to customers, employees and UKHO corporate proprietary information. Sanitisation scripts must be appropriately controlled, and the copying and sanitisation of the data must be requested through a documented service request.