2.10.6 Data Protection & Client Records Statement

Recordkeeping, Retention & Data Security (SOP Section 11)

The Gabriel Foundation implements stringent electronic and physical safeguards for all client records:

• Encrypted Databases: Client case files are stored in 256-bit AES encrypted, password-protected databases accessible exclusively to assigned clinical and case management staff.
• De-Identified Reporting: All reporting to federal, state, or private grant funders (under VAWA, FVPSA, and 2 CFR 200 standards) uses aggregated, non-identifying data. Names, birth dates, and shelter locations are never shared (SOP 11.2).
• Retention & Breach Protocol: Records are retained in strict accordance with statutory retention schedules and securely shredded upon expiration. Any potential data incident triggers immediate notification and remediation protocols under SOP Section 11.3.