Illustrative stock imagery from Pexels. Images do not identify the people, premises or events discussed and do not imply endorsement.

Reviewed 26 October 2026. Original publication date retained: 2025-01-19.

Location records can reveal more about a person than a contact list does. An audit can follow who obtains the information, how it is used and which suppliers can access it.

Questions to follow in an audit

  • Who has authorised each use of the location information?
  • How are supplier access and onward disclosure checked?
  • What evidence shows that access is removed when no longer needed?

Connect the records with practice

Sample one supplier account, its approval, the access actually available and the record of a subsequent review.

These are illustrative audit trails, not findings about a named organisation, technical instructions or a guarantee of a particular result. The appropriate evidence depends on the activities, risks and agreed scope. The organisation remains responsible for its operations and legal obligations.

AAA provides independent certification audits. Confirm the applicable standard edition, scope and customer requirements before agreeing a programme. Request an indicative price or discuss your proposed audit.

Further reading: ISO information security.