9.3 Persons

For a person, the organisation shall record the full name supported by the best available evidence.

The organisation may record previous names, date of birth or a personal identifier only where:

the information is necessary to distinguish identity or meet an applicable requirement;

a lawful basis exists;

access is restricted appropriately; and

the need and retention period are documented.

Titles, honorifics and preferences shall be distinguished from the legal name.