Ensure your data quality is fit for purpose and others can use it.
Identify what you need to collect. Comply with legislation and policy.
Assess the level of risk of the date you collect. Know how to store, use and share it.
Keep records as long as you need. Follow retention and disposal rules.