Anthony LaFaziaCEO, Atlantic Training · CEO at Atlantic Training | EdTech & Safety Compliance Leader

The Two-Second Habit That Protects Your Customers' Data

4 Aug 2026 · 2 min

Watch on YouTube

2:14

In this short compliance video, the presenter outlines immediate, actionable habits that protect both physical assets and customer data. The first segment stresses physical security as the frontline defense: employees must keep deal jackets and other records locked in drawers or cabinets whenever they step away, maintain a clean desk, and ensure back‑office doors are locked when unoccupied. The second segment details privacy and disclosure obligations, emphasizing that customer non‑public personal information (NPI) cannot be shared with external parties without a clear privacy notice, an opt‑out opportunity, or a written authorization processed through official forms. It also instructs staff to route any vendor data requests to a manager or compliance contact rather than deciding independently. Interspersed is a brief promotional plug for Atlantic Training’s HR and soft‑skill courses delivered via the Wave management platform, highlighting automation and free software when a training plan is selected.

Chapters

All right, let's get into the boots on the ground rules. Physical security is your first line of defense. If you're handling ROs or deal jackets, they've got to be secured at all times. Now, trust me on this. A clean desk isn't just about being organized. It's about compliance. If you step away from your workstation, even for just a few minutes, you've gotta lock those documents in a drawer or cabinet. You must. You gotta do it. If you're in a back office, the door, it needs to be locked if nobody's inside.
Is your employee training scattered across spreadsheets and emails? There's a better way to grow your team. Atlantic Training provides world-class HR and soft skills courses, all hosted inside our Wave management platform. From onboarding automation to tracking leadership development, Wave tracks it all. And you get the software for free when you choose your training plan. Click the link below to build your custom plan now.
We also have strict privacy and disclosure rules to follow. We can't share customer NPI with outside companies just because they ask for it. In most cases, The law requires us to give customers a clear privacy notice. If we want to share their MPI with certain outside companies for purposes other than processing transactions, servicing accounts, or other limited situations that are allowed by law, we've got to give them a clear chance to opt out first. Sometimes we might rely on a customer's written authorization instead, but that has to be handled through our official forms. Not on the fly at the counter. If a vendor asks for customer data, don't decide on your own. Send them to a manager or the compliance contact.