Separate card production from access records
A manufacturer may need a serial range or variable print file without needing guest names or live access permissions.
Use the minimum data
Only include fields required for the approved production task. Avoid sending passwords, access keys or live system credentials.
Control transfer and retention
Agree how files are transmitted, who can access them, how long they are kept and how completion is recorded.
Keep legal review local to the controller
The property or authorised operator should assess its obligations and obtain appropriate professional advice for its processing activities.
