[Verse 1]
In the HR office where the secrets hide
Social Security numbers, medical files inside
Compensation data, discipline records too
Investigation folders, it's all up to you
The most sensitive data in the company's care
One wrong move and it's a nightmare
[Chorus]
Minimize, organize, who gets to see
Control access carefully, that's the key
Retain what's needed, then let it go
Breach notification, employees should know
Data privacy, it's our responsibility
Guard it well for security
[Verse 2]
Collect only what you need for the job at hand
Don't gather extra just because you can
Keep it only as long as the law requires
Delete when the retention period expires
Different documents have different rules
Use your jurisdiction's legal tools
[Chorus]
Minimize, organize, who gets to see
Control access carefully, that's the key
Retain what's needed, then let it go
Breach notification, employees should know
Data privacy, it's our responsibility
Guard it well for security
[Bridge]
GDPR gives them rights to see their own
Some states follow suit, the trend has grown
Employees can request what data you hold
Respond within the timeline you've been told
[Verse 3]
In your HRIS set the access right
Payroll sees pay, but not discipline fights
Managers need performance, not medical leave
Give each role only what they need to achieve
When vendors process data for your team
Make sure your agreements are watertight and clean
[Chorus]
Minimize, organize, who gets to see
Control access carefully, that's the key
Retain what's needed, then let it go
Breach notification, employees should know
Data privacy, it's our responsibility
Guard it well for security
[Outro]
From SSNs to investigation files
Protect the data, go the extra miles
HR professionals, the guardians we'll be
Data privacy is our legacy