I work for an insurance company. I see a lot of sensitive info about people. Full names, addresses, bank info, several sensitive diagnoses because it's health insurance...

Yearly compliance = do I remember my legal obligations in handling this info correctly so we don't have huge privacy breaches? Which memory hole do I shove it down when I'm done?