Exclude information the review does not need
Do not send payment-card numbers, banking credentials, online-banking passwords, social insurance numbers, health records, government account passwords, or unrelated personal information through a public form. Mark particularly sensitive documents and preserve originals in the creditor’s own controlled systems.
Document the transfer decision
Record what was shared, why it was relevant, any restrictions, and what remains with the creditor. Data minimization improves operational clarity and supports a more credible file review without implying that a privacy-conscious transfer guarantees acceptance or recovery.

