# Personal Record

> Personal Record means a document identifying an individual, detailing relevant information as per stipulated guidelines

**Term:** Personal Record  
**Last updated:** 2026-07-29

## Definition

## What Personal Record Means in a Contract

A Personal Record, within a contract, refers to any document or file that identifies a particular individual and records relevant details about that person. This can include employment files, identification documents, medical notes, financial statements, or any structured collection of data tied to an identifiable person. Contracts use this term to establish clear boundaries around what counts as identifying information subject to the agreement's obligations.

The concept matters because many agreements, particularly those involving employment, healthcare, financial services, or data processing, need to specify exactly what qualifies as a Personal Record so that both parties understand their respective duties. Without a clear definition, disputes can arise over whether a given document falls within scope, especially when confidentiality, retention, or disclosure obligations are attached to it.

In practice, Personal Records are often referenced alongside broader data protection or privacy clauses. A contract might state that a Personal Record includes any information that identifies, or could reasonably be used to identify, an individual, and that such records must be handled according to stipulated guidelines set out elsewhere in the agreement or in supporting policies.

## How Personal Record Is Defined or Measured

Most contracts define a Personal Record by reference to the type of information it contains rather than by a fixed format. Typical elements include a person's name, date of birth, address, national identification number, employment history, health information, or financial details. The defining feature is that the record, taken as a whole or in combination with other data, allows the individual to be identified.

Some agreements measure the scope of a Personal Record against the law governing the contract, incorporating statutory concepts of personal data or personal information where relevant. Others take a narrower, contract-specific approach, listing precisely which categories of information will be treated as Personal Records for the purposes of that particular agreement.

- Identity documents, such as passports or driving licences
- Employment files, including performance evaluations and disciplinary records
- Financial and credit information
- Health and medical records
- Contact details and next-of-kin information

Because the definition can vary significantly between agreements, parties should not assume a universal standard applies. The exact wording chosen in each contract determines what obligations, such as confidentiality, retention limits, or secure storage, attach to a given piece of information.

## Where Personal Record Appears in Agreements

The term Personal Record commonly appears in employment contracts, where it governs how an employer collects, stores, and eventually disposes of information about staff. It also appears in healthcare agreements, insurance policies, and financial services contracts, where sensitive personal information is routinely exchanged or stored. A [Statement of Information Form](https://www.genieai.co/en-us/template-type/statement-of-information-form) is one example of a document that may itself constitute or generate a Personal Record.

Data processing agreements, service contracts involving background checks, and vendor agreements that require identity verification also make frequent use of the term. In these contexts, the agreement typically sets out how the Personal Record will be created, who may access it, how long it will be retained, and the circumstances under which it may be disclosed to third parties.

Industries that handle significant volumes of personal information, such as [healthcare](https://www.genieai.co/industry/healthcare), [finance](https://www.genieai.co/industry/finance), and [insurance](https://www.genieai.co/industry/insurance), often build detailed Personal Record provisions into their standard contracts. This reflects the heightened sensitivity of the data involved and the corresponding need for careful contractual control.

## Why the Exact Wording Matters

The precise wording used to define Personal Record can materially affect the scope of a party's obligations. A broad definition may capture almost any document that mentions an individual, while a narrow definition might exclude certain categories of information that one party assumed would be protected. This gap can lead to disagreements about compliance, especially during audits or disputes.

Wording also affects how the term interacts with related concepts such as confidential information, personal data, and business records. If these terms are not carefully distinguished, a contract may create overlapping or conflicting obligations, making it difficult to determine which rules apply to a specific document. Clear drafting reduces this risk by ensuring each term has a distinct, non-overlapping meaning.

Additionally, the consequences of mishandling a Personal Record, such as breach notification duties or liability for unauthorized disclosure, often hinge on whether the information in question meets the contract's definition. Precise language therefore has a direct bearing on risk allocation between the parties.

## Drafting Considerations

When drafting provisions involving Personal Records, it is important to align the definition with the actual categories of information the parties expect to handle. Overly broad definitions can create unnecessary compliance burdens, while overly narrow ones may leave sensitive information unprotected. Cross-referencing any applicable [Information Security Policy](https://www.genieai.co/en-us/template-type/information-security-policy) can help ensure consistency across related documents.

Drafters should also specify retention periods, access controls, and permitted uses for Personal Records, and consider whether a [Release of Information Form](https://www.genieai.co/en-us/template-type/release-of-information-form) is needed before any disclosure to a third party. Coordination with HR, compliance, or IT stakeholders during drafting helps ensure the definition reflects operational reality rather than abstract legal language.

Finally, parties should review how the Personal Record definition interacts with other clauses, such as confidentiality, data protection, and indemnity provisions, to avoid gaps or duplication. Regular review of these definitions is advisable as data practices and applicable guidelines evolve over time.

## Context

### Relevant circumstances

- Employee onboarding
- Patient admission into a healthcare facility
- A third-party service provider handling personal data
- Creation of client profiles in a customer relationship management (CRM) system

### Relevant sectors

- Healthcare
- Finance

## Relevant contract types

- [Statement of Information Form](https://www.genieai.co/en-us/template-type/statement-of-information-form)
- [Information Security Policy](https://www.genieai.co/en-us/template-type/information-security-policy)
- [Release of Information Form](https://www.genieai.co/en-us/template-type/release-of-information-form)

---

This is the Markdown representation of [https://www.genieai.co/en-us/define/personal-record](https://www.genieai.co/en-us/define/personal-record), provided for AI agents and crawlers. The HTML page is canonical. See [/llms.txt](https://www.genieai.co/llms.txt) for the full content map.
