Information Security: the heart of the paperto-digital. 14 th September 2017

Size: px
Start display at page:

Download "Information Security: the heart of the paperto-digital. 14 th September 2017"

Transcription

1 Information Security: the heart of the paperto-digital journey 14 th September 2017

2 Agenda Preparing for GDPR (video) Information Commissioner's Office GDPR: What to expect, Martin Fletcher, National Archives Paper to Digital Transformation Jonathan Elliott, Xerox Break The challenges of digital transformation Roundtable Information village

3 Preparing for GDPR Information Commissioner s Office video

4 ICO video To watch the ICO video shown on the day, please click here to view it on YouTube 4

5 GDPR for IAOs Martin Fletcher The National Archives Crown Crown Copyright 2017

6 Key relationships 6 Crown Copyright 2017

7 Part 2 - The Public Good Preparing for GDPR Activity o Sharing information o Collecting information o Publishing information Colin Crown Copyright 2017

8 Data Protection and Information Management along with protecting personal data GDPR provides a framework for good information management the data protection principles can be used for all corporate data in order to keep it secure the principles can also act as an enabler, for example making it easier to find data in response to a Freedom of Information request ico 8 Crown Copyright 2017

9 General Data Protection Regulation (GDPR) replaces the Data Protection Act on 25 th May 2018 refreshes data protection principles imposes a duty on organisations to report certain types of breach Crown Copyright 2017

10 Data Protection Principles lawfulness, fairness and transparency collected for specific purposes adequate, relevant and not excessive accuracy storage limitation integrity and confidentiality Bartyzel 2014 accountability 10 Crown Copyright 2017

11 Key Considerations Ensure that explicit and valid consent is gained to collect and process data, where this is the condition for processing being relied upon change in the status of contractors/data processors breach reporting within 72 hours 11 Crown Copyright 2017

12 Five things IAOs should know awareness: make sure you and your staff are aware that the law is changing, and the impact this is likely to have information: find out what personal data you hold, where it came from and who you share it with individuals rights: check your current working practices to ensure they comply with the rights of data subjects legal basis: look at the types of processing you carry out, identify your legal basis for doing this and document it breaches: make sure your staff are aware of the procedures to detect and report data breaches 12 Crown Copyright 2017

13 13 Crown Copyright 2017

14 Activity: Exploiting Information Effectively The Bee-Keeping licencing agency holds a large amount of physical records from the first half of the 20 th century relating to historical applications for bee keeping licenses. In order to make it easier for bee keeping clubs to trace their histories the agency has decided to digitise these records and make them available through an online portal. The agency does not have the in house capacity to digitise such a large amount of records; therefore it is considering hiring a data processor outside the EU to complete the task on its behalf. Before any information gets sent over, discuss as a group: What questions do we need to ask ourselves regarding the data? What questions do we need to ask the data processor? 14 Crown Copyright 2017

15 Further Support ICO Data Protection Reform website GDPR Overview 12 steps to prepare for GDPR 15 Crown Copyright 2017

16 Paper to Digital Transformation Jonathan Elliott

17 Degree of Change Management Service Transformation Principles Integrated document workflows Paper to Digital Transformation Multi-channel Communications Smarter technology Shared Services Consolidate suppliers Transformational Do things differently Transitional Do the same with less resources Transactional Pay less for the same resource 17 September 15, 2017 Business Benefit

18 Xerox Services for Public Sector to support the Paper to Digital journey Patient / Citizen

19 Digitising Paper Records To view the Worcestershire video shown on the day, please click here to view it on YouTube September 19 15, 2017

20 Innovation - Services Road Map Cost / Efficiency Data Analytics AI VALUE Hybrid Mail MPS Digital Communications External Print Creative Services EDRMS Document Assessments Digital Records Digital Mailroom Service Start User experience Q1 Digital Asset Management Multi Channel Communications Document Workflow TCO Q2 Q3 Q4 Year 2 Year 3 Year 4 Year 5+ RPA Transition Transformation Optimisation 20 Value Chain Hybrid Mail to reduce need for printers deliver postage and admin savings De-risk take on existing vendor Manage existing contracts Rationalise & refresh MFD fleet Implement follow you to reduce print volume Implement Xerox additional onsite fleet support service Deliver Proactive Support September 15, 2017 Value Chain Transition external print from externals to Xerox Introduce DR and load balancing via Xerox print network Introduce Xerox commercial print sourcing service to lower costs Provide ad-hoc scanning service though fleet Introduce Hybrid mail for outbound correspondence Introduce digital mailroom to close the loop on all correspondence Digitise health records across all sites Implement Scanning workflow on MFDs for day forward capture Xerox Internal Use Only Aspirations Implement Records solutions Implement improved workflow to streamline processes using digital records Implement data analytics to use information in digital records to drive planning decisions and better outcomes Realise multi-channel communication benefits by signing up citizens to digital services. Introduce Robotic Process Automation and AI to speed up decision making and reduce admin tasks.

21 Closing remarks A service transformation mind-set can drive real and measurable change Our services focus on service improvement and cost reduction but critically support your journey to being GDPR compliant New frameworks facilitate this journey of change A roadmap for the paper to digital journey is important Stepped approach is sensible Long term strategic partnerships underpin success in this market Xerox is continuing to invest and innovate our services to meet dynamic needs of the Public Sector 21 September 15, 2017

22 Roundtable

23 Which word springs to mind most with regards to GDPR? 23 September 15, 2017 Xerox Internal Use Only

24 2017 Xerox Corporation. All rights reserved. Xerox and Xerox and Design are trademarks of Xerox Corporation in the United States and/or other countries. 12/16 MPSPA-18EB

GDPR: A QUICK OVERVIEW

GDPR: A QUICK OVERVIEW GDPR: A QUICK OVERVIEW 2018 Get ready now. 29 June 2017 Presenters Charles Barley Director, Risk Advisory Services Charles Barley, Jr. is responsible for the delivery of governance, risk and compliance

More information

Made In Hackney Data Protection Policy Last Updated:

Made In Hackney Data Protection Policy Last Updated: Made In Hackney Data Protection Policy Last Updated: 16.05.2018 Definitions Charity GDPR Responsible Person Register of Systems Made In Hackney (MIH), a registered charity. means the General Data Protection

More information

Data Protection and GDPR

Data Protection and GDPR Data Protection and GDPR At DPDgroup UK Ltd (DPD & DPD Local) we take data protection seriously and have updated all our relevant policies and documents to ensure we meet the requirements of GDPR. We have

More information

The isalon GDPR Guide Helping you understand and prepare for the legislation

The isalon GDPR Guide Helping you understand and prepare for the legislation The isalon GDPR Guide Helping you understand and prepare for the legislation 01522 887200 isalonsoftware.co.uk Read our guide today to help you plan for the new legislation.. The General Data Protection

More information

Data Protection Policy

Data Protection Policy Data Protection Policy Introduction Stewart Watt & Co. is law firm and provides legal advice and assistance to its clients. It is regulated by the Law Society of Scotland. The personal data that Stewart

More information

Governance and Compliance Learning from the Private Sector. David Coverdale

Governance and Compliance Learning from the Private Sector. David Coverdale Governance and Compliance Learning from the Private Sector David Coverdale Governance Challenges The Patient Journey CQC Business Continuity Policy QoF Data GDPR LHA2 GRC Training Risk IG BIA Resilience

More information

General Data Protection Regulation (GDPR) Key Facts & FAQ s

General Data Protection Regulation (GDPR) Key Facts & FAQ s General Data Protection Regulation (GDPR) Key Facts & FAQ s GDPR comes into force on 25 May 2018 GDPR replaces the Data Protection Act 1998. The main principles are much the same as those in the current

More information

Data Management and Security in the GDPR Era

Data Management and Security in the GDPR Era Data Management and Security in the GDPR Era Franck Hourdin; Vice President, EMEA Security Russ Lowenthal; Director, Database Security Product Management Mike Turner; Chief Operating Officer, Capgemini

More information

UWTSD Group Data Protection Policy

UWTSD Group Data Protection Policy UWTSD Group Data Protection Policy Contents Clause Page 1. Policy statement... 1 2. About this policy... 1 3. Definition of data protection terms... 1 4. Data protection principles..3 5. Fair and lawful

More information

Accelerate GDPR compliance with the Microsoft Cloud

Accelerate GDPR compliance with the Microsoft Cloud Regional Forum on Cybersecurity in the Era of Emerging Technologies & the Second Meeting of the Successful Administrative Practices -2017 Cairo, Egypt 28-29 November 2017 Accelerate GDPR compliance with

More information

center Guide to GDPR

center Guide to GDPR Guide Emailcenter Guide to GDPR For Marketers Contents Introduction...3 What Is GDPR & Why Is This Happening?...4 What Is Going To Change?...5 How You Obtain Email Addresses...6 How You Store Personal

More information

Royal Mail Consultation: Changes to Postal Schemes to reflect new data protection legislation

Royal Mail Consultation: Changes to Postal Schemes to reflect new data protection legislation Royal Mail Consultation: Changes to Postal Schemes to reflect new data protection legislation Published: 27 February 2018 Responses required by: 26 March 2018 Summary 1. Postal Schemes set out the terms

More information

Data Protection Policy

Data Protection Policy Data Protection Policy Data Protection Policy Version 3.00 May 2018 For more information, please contact: Technical Team T: 01903 228100 / 01903 550242 E: info@24x.com Page 1 The Data Protection Law...

More information

General Data Protection Regulation (GDPR) - A CANDDi perspective

General Data Protection Regulation (GDPR) - A CANDDi perspective General Data Protection Regulation (GDPR) - A CANDDi perspective 1 - Summary With General Data Protection Regulation less than 12 months away there is a legal requirement for all businesses to have taken

More information

This article will explain how your club can lawfully process personal data and show steps you can take to ensure that your club is GDPR compliant.

This article will explain how your club can lawfully process personal data and show steps you can take to ensure that your club is GDPR compliant. GDPR and BMC Clubs Lawful basis for Processing Personal Data This article will explain how your club can lawfully process personal data and show steps you can take to ensure that your club is GDPR compliant.

More information

GDPR Compliance. Clauses

GDPR Compliance. Clauses 1 Clauses GDPR The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) is a privacy and data protection regulation in the European Union (EU). It became enforceable from May 25 2018. The

More information

Frequently Asked Questions

Frequently Asked Questions Frequently Asked Questions After having undertaken a period of research within recreational cricket, this document is aimed at addressing the frequently asked questions from cricket Clubs, Leagues, Boards

More information

BHBIA New Data Protection Rules. Pharma Company Perspective. Guy Murray Director, Market Research & Analytics, GC&BI MR Operations and Compliance, MSD

BHBIA New Data Protection Rules. Pharma Company Perspective. Guy Murray Director, Market Research & Analytics, GC&BI MR Operations and Compliance, MSD BHBIA New Data Protection Rules Pharma Company Perspective Guy Murray Director, Market Research & Analytics, GC&BI MR Operations and Compliance, MSD Pharma Company Perspective Data Controllers Responsibilities

More information

Managing Privacy Risk & Compliance in Financial Services. Brett Hamilton Advisory Solutions Consultant ServiceNow

Managing Privacy Risk & Compliance in Financial Services. Brett Hamilton Advisory Solutions Consultant ServiceNow Managing Privacy Risk & Compliance in Financial Services Brett Hamilton Advisory Solutions Consultant ServiceNow 1 Speaker Introduction INSERT PHOTO Name: Brett Hamilton Title: Advisory Solutions Consultant

More information

G DATA Whitepaper. The new EU General Data Protection Regulation - What businesses need to know

G DATA Whitepaper. The new EU General Data Protection Regulation - What businesses need to know G DATA Whitepaper The new EU General Data Protection Regulation - What businesses need to know G DATA Software AG September 2017 Introduction Guaranteeing the privacy of personal data requires more than

More information

Case Study Vitality Justin Skinner Group Chief Risk Officer

Case Study Vitality Justin Skinner Group Chief Risk Officer Case Study Vitality Justin Skinner Group Chief Risk Officer Our core purpose Our core purpose is to Make people MAKE PEOPLE HEALTHIER healthier AND ENHANCE AND and enhance and PROTECT THEIR LIVES protect

More information

Eight Minute Expert GDPR. Login. Password

Eight Minute Expert GDPR. Login. Password Eight Minute Expert GDPR Login Password MIN1 What is the GDPR? The General Data Protection Regulation is a new regulation by the EU that will replace the current Data Protection Directive of 1995. It is

More information

GDPR AND WHAT IT MEANS FOR CRM AND CUSTOMER ENGAGEMENT MAY. A 7-step practical guide to achieving and maintaining GDPR compliance by 25 May 2018

GDPR AND WHAT IT MEANS FOR CRM AND CUSTOMER ENGAGEMENT MAY. A 7-step practical guide to achieving and maintaining GDPR compliance by 25 May 2018 GDPR AND WHAT IT MEANS FOR CRM AND CUSTOMER ENGAGEMENT MAY 25 2018 A 7-step practical guide to achieving and maintaining GDPR compliance by 25 May 2018 A 7-step practical guide to achieving and maintaining

More information

GDPR: A technical perspective from Arkivum

GDPR: A technical perspective from Arkivum GDPR: A technical perspective from Arkivum Under the GDPR, you have a general obligation to implement technical and organisational measures to show that you have considered and integrated data protection

More information

You will see lots of references in the Checklist to the GDPR Pack if you would like to purchase this, go to

You will see lots of references in the Checklist to the GDPR Pack if you would like to purchase this, go to Suzanne Dibble 2018. Copyright in this document belongs to Suzanne Dibble. You may not copy or use it for any purpose unless you have purchased this template document from Suzanne Dibble. You may not allow

More information

The GDPR Are you ready?

The GDPR Are you ready? The GDPR Are you ready? kpmg.ie The GDPR - Overview The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) will come into force from 25th May 2018, replacing the existing data protection

More information

PS Mailing Services Ltd Data Protection Policy May 2018

PS Mailing Services Ltd Data Protection Policy May 2018 PS Mailing Services Ltd Data Protection Policy May 2018 PS Mailing Services Limited is a registered data controller: ICO registration no. Z9106387 (www.ico.org.uk 1. Introduction 1.1. Background We collect

More information

Data protection. 3 April 2018

Data protection. 3 April 2018 Data protection 3 April 2018 Policy prepared by: Ltd Approved by the Directors on: 3rd April 2018 Next review date: 31st March 2019 Data Protection Registration Number (ico.): Z2184271 Introduction Ltd

More information

GDPR Update and ENISA guidelines

GDPR Update and ENISA guidelines GDPR Update and ENISA guidelines 2016 [Type text] There are two topics that should be uppermost in every CISO's mind, how to address the growing demand for Unified Communications (UC) and how to ensure

More information

General Data Protection Regulation (GDPR) and the Implications for IT Service Management

General Data Protection Regulation (GDPR) and the Implications for IT Service Management General Data Protection Regulation (GDPR) and the Implications for IT Service Management August 2018 WHITE PAPER GDPR: What is it? The EU General Data Protection Regulation (GDPR) replaces the Data Protection

More information

Privacy and Data Protection Policy

Privacy and Data Protection Policy Manchester Imaging Limited Arch 29 North Campus Incubator Altrincham Street Manchester M1 3NL United Kingdom www.manchester-imaging.com Privacy and Data Protection Policy This notice is issued by: Manchester

More information

World Wide Jobs Ltd t/a Findmyexpert.com Privacy Policy 12 th April 2018

World Wide Jobs Ltd t/a Findmyexpert.com Privacy Policy 12 th April 2018 World Wide Jobs Ltd t/a Findmyexpert.com Privacy Policy 12 th April 2018 We understand that you are aware of and care about your own personal privacy interests and we take that seriously. This Privacy

More information

General Data Protection Regulation (GDPR) NEW RULES

General Data Protection Regulation (GDPR) NEW RULES General Data Protection Regulation (GDPR) NEW RULES AGENDA A. GDPR : general overview B. Sectorial topics and concerns GDPR GENERAL OVERVIEW 1. GDPR : WHAT IS IT AND WHY CARE? 27 April 2016 : Approval

More information

Data Protection Policy

Data Protection Policy Data Protection Policy Worcester Action for Youth Last updated 26 November 2018 Definitions Charity means Worcester Action for Youth, a registered charity No. 1169888 GDPR Responsible Person Register of

More information

H2020-LEIT-ICT WP European Data Infrastructure ICT-13 Supporting the emergence of data markets and the data economy

H2020-LEIT-ICT WP European Data Infrastructure ICT-13 Supporting the emergence of data markets and the data economy H2020-LEIT-ICT WP2018-2020 European Data Infrastructure ICT-13 Supporting the emergence of data markets and the data economy Kimmo Rossi DG CNECT.G1 Data Policy and Innovation Unit Problem statement Sharing

More information

DEPARTMENT OF JUSTICE AND EQUALITY. Data Protection Policy

DEPARTMENT OF JUSTICE AND EQUALITY. Data Protection Policy DEPARTMENT OF JUSTICE AND EQUALITY Data Protection Policy May 2018 Contents Page 1. Introduction 3 2. Scope 3 3. Data Protection Principles 4 4. GDPR - Rights of data subjects 6 5. Responsibilities of

More information

A guide to understanding the implications of GDPR on print and document management

A guide to understanding the implications of GDPR on print and document management There are better ways to ensure your documents and print are GDPR compliant A guide to understanding the implications of GDPR on print and document management What is GDPR? f f General Data Protection

More information

Introduction. Savings in Postal Communications How the Charity Sector can take advantage of developments in postal products and services

Introduction. Savings in Postal Communications How the Charity Sector can take advantage of developments in postal products and services Introduction April 2015 Savings in Postal Communications How the Charity Sector can take advantage of developments in postal products and services in association with 2014 Neopost 2015 Neopost 3 Contents

More information

Domino s Pizza Enterprises Ltd. The Business Partner. Code of Practice

Domino s Pizza Enterprises Ltd. The Business Partner. Code of Practice Domino s Pizza Enterprises Ltd The Business Partner Code of Practice INTRODUCTION At Domino s we are committed to living our brand ethos of People Powered Pizza. This includes the people who work with

More information

Eco Web Hosting Security and Data Processing Agreement

Eco Web Hosting Security and Data Processing Agreement 1 of 7 24-May-18, 11:50 AM Eco Web Hosting Security and Data Processing Agreement Updated 19th May 2018 1. Introduction 1.1 The customer agreeing to these terms ( The Customer ), and Eco Web Hosting, have

More information

GDPR- the new General Data Protection Regulations. Staff PDM- 2 nd May 2018

GDPR- the new General Data Protection Regulations. Staff PDM- 2 nd May 2018 GDPR- the new General Data Protection Regulations Staff PDM- 2 nd May 2018 What, when, how... It will supersede the Data Protection Act 1998. It sets out new regulations about the sharing of personal data

More information

Prohire Software Systems Limited ("Prohire")

Prohire Software Systems Limited (Prohire) Prohire Software Systems Limited ("Prohire") White paper on Prohire GDPR compliance measures 11 th May 2018 Contents 1. Overview 2. Legal Background 3. How Prohire complies 4. Wedlake Bell 5. Conclusion

More information

Data Protection Policy

Data Protection Policy Data Protection Policy Addressing the General Data Protection Regulation (GDPR) 2018 [EU] and the Data Protection Act (DPA) 2018 [UK] For information on this Policy or to request Subject Access please

More information

Eight Minute Expert GDPR

Eight Minute Expert GDPR Eight Minute Expert GDPR GDPR Login Password MIN1 What is the GDPR? The General Data Protection Regulation is a new regulation by the EU that will replace the current Data Protection Directive of 1995.

More information

AIRMIC ENTERPRISE RISK MANAGEMENT FORUM

AIRMIC ENTERPRISE RISK MANAGEMENT FORUM AIRMIC ENTERPRISE RISK MANAGEMENT FORUM Date 10 November 2016 Name Nick Gibbons Position, PARTNER BLM T: 0207 457 3567 E: Nick.Gibbons@blmlaw.com SUMMARY Cyber crime is now a daily reality Every business

More information

Data Protection Policy

Data Protection Policy Introduction In order to; provide education, training, assessment and qualifications to its customers and clients, promote its services, maintain its own accounts and records and support and manage its

More information

Islam21c.com Data Protection and Privacy Policy

Islam21c.com Data Protection and Privacy Policy Islam21c.com Data Protection and Privacy Policy Purpose of this policy The purpose of this policy is to communicate to staff, volunteers, donors, non-donors, supporters and clients of Islam21c the approach

More information

Data Sharing Agreement. Between Integral Occupational Health Ltd and the Customer

Data Sharing Agreement. Between Integral Occupational Health Ltd and the Customer Data Sharing Agreement Between Integral Occupational Health Ltd and the Customer 1. Definitions a. Customer means any person, organisation, group or entity accepted as a customer of IOH to access OH services

More information

General Data Protection Regulation (GDPR)

General Data Protection Regulation (GDPR) General Data Protection Regulation (GDPR) a. General Data Protection... 2 b. IT systems compliance... 2 c. Employee awareness... 2 d. Information we hold... 3 e. Data flow & Data sharing... 4 f. Data Accuracies

More information

Toucan Telemarketing Ltd.

Toucan Telemarketing Ltd. Toucan Telemarketing Ltd. GDPR Data Protection Policy Introduction Toucan Telemarketing is committed to protecting the rights and freedoms of data subjects and safely and securely processing their data

More information

COMPUTAMATRIX LIMITED T/A MATRICA Data Protection Policy September Table of Contents. 1. Scope, Purpose and Application to Employees 2

COMPUTAMATRIX LIMITED T/A MATRICA Data Protection Policy September Table of Contents. 1. Scope, Purpose and Application to Employees 2 COMPUTAMATRIX LIMITED T/A MATRICA Data Protection Policy September 2018 Table of Contents 1. Scope, Purpose and Application to Employees 2 2. Reference Documents 2 3. Definitions 3 4. Data Protection Principles

More information

Subject: Kier Group plc Data Protection Policy

Subject: Kier Group plc Data Protection Policy Kier Group plc Data Protection Policy Subject: Kier Group plc Data Protection Policy Author: Compliance Document type: Policy Authorised by: Kier General Counsel & Company Secretary Version 3 Effective

More information

What You Need to Know About Addressing GDPR Data Subject Rights in Pivot

What You Need to Know About Addressing GDPR Data Subject Rights in Pivot What You Need to Know About Addressing GDPR Data Subject Rights in Pivot Not Legal Advice This document is provided for informational purposes only and must not be interpreted as legal advice or opinion.

More information

Data protection policy

Data protection policy Data protection policy Context and overview Introduction The ASHA Centre needs to gather and use certain information about individuals. These can include customers, suppliers, business contacts, employees

More information

DATA PROTECTION POLICY THE HOLST GROUP

DATA PROTECTION POLICY THE HOLST GROUP DATA PROTECTION POLICY THE HOLST GROUP INTRODUCTION The purpose of this document is to provide a concise policy regarding the data protection obligations of The Holst Group. The Holst Group is a data controller

More information

INCLUDE-ED PRIVACY POLICY

INCLUDE-ED PRIVACY POLICY INCLUDE-ED PRIVACY POLICY BACKGROUND: Include-ed Limited understands that your privacy is important to you and that you care about how your personal data is used and shared. We respect and value the privacy

More information

M T BUCKLEY & Co Chartered Accountants

M T BUCKLEY & Co Chartered Accountants M T BUCKLEY & Co Chartered Accountants 2 Beulah Walk, Woldingham, Caterham, Surrey CR3 7LL Telephone: 01883 650420 Mobile: 07876 030622 1. PURPOSE OF THIS POLICY PRIVACY POLICY This policy describes how

More information

DLB Privacy Policy. Why we require your information

DLB Privacy Policy. Why we require your information At Etive Technologies Limited (Etive) which operates Digital Log Book, (DLB). We are committed to protecting the privacy of our customers and the responsible management of personal information in accordance

More information

Data protection legal jungle or common sense Susan Healy. Religious Archives Group 22 Mar 2010

Data protection legal jungle or common sense Susan Healy. Religious Archives Group 22 Mar 2010 Data protection legal jungle or common sense Susan Healy Religious Archives Group 22 Mar 2010 In this presentation Things you need to know Things you need to do and not do Particular issues? Things you

More information

Thailand Digital Government Development Plan Digital Government Development Agency (Public Organization) (DGA)

Thailand Digital Government Development Plan Digital Government Development Agency (Public Organization) (DGA) ขอแค ประมาณ ร ปน นะโม Thailand Digital Government Development Plan Digital Government Development Agency (Public Organization) (DGA) 1 Government agencies need to develop the Digital Government Master

More information

Privacy Policy GENERAL

Privacy Policy GENERAL Privacy Policy GENERAL This document sets out what information Springhill Care Group Ltd collects from visitors, how it uses the information, how it protects the information and your rights. Springhill

More information

Data Protection Policy

Data Protection Policy The Worshipful Company of Framework Knitters Data Protection Policy Addressing the General Data Protection Regulation (GDPR) 2018 [EU] and the Data Protection Act 1998 (DPA) [UK] For information on this

More information

Aon Service Corporation Law Global Privacy Office. Aon Client Data Privacy Summary

Aon Service Corporation Law Global Privacy Office. Aon Client Data Privacy Summary Aon Client Data Privacy Summary Table of Contents Our Commitment to Data Privacy 3 Our Data Privacy Principles 4 Aon Client Data Privacy Summary 2 Our Commitment to Data Privacy Data Privacy Backdrop As

More information

General Data Protection Regulation (GDPR) The impact of doing business in Asia

General Data Protection Regulation (GDPR) The impact of doing business in Asia SESSION ID: GPS-R09 General Data Protection Regulation (GDPR) The impact of doing business in Asia Ilias Chantzos Senior Director EMEA & APJ Government Affairs Symantec Corporation @ichantzos Typical Customer

More information

Website Privacy Statement

Website Privacy Statement Page: 1 of 4 We are a member of the Mediline Group, a company incorporated in England and Wales. Our company number is 2068130 and our registered address is: 3rd Floor Butt Dyke House, 33 Park Row, Nottingham,

More information

ACCOUNTING TECHNICIANS IRELAND DATA PROTECTION POLICY GENERAL DATA PROTECTION REGULATION

ACCOUNTING TECHNICIANS IRELAND DATA PROTECTION POLICY GENERAL DATA PROTECTION REGULATION ACCOUNTING TECHNICIANS IRELAND DATA PROTECTION POLICY GENERAL DATA PROTECTION REGULATION Document Control Owner: Distribution List: Data Protection Officer Relevant individuals who access, use, store or

More information

Data Protection Impact Assessment (DPIA) Last Updated: 21 June, 2018

Data Protection Impact Assessment (DPIA) Last Updated: 21 June, 2018 Data Protection Impact Assessment (DPIA) Last Updated: 21 June, 2018 About CareMonkey CareMonkey is an online and mobile platform for Forms, Medical Records and Field Trip Management. CareMonkey is designed

More information

UWC International Data Protection Policy

UWC International Data Protection Policy UWC International Data Protection Policy 1. Introduction This policy sets out UWC International s organisational approach to data protection. UWC International is committed to protecting the privacy of

More information

Building Trust in the Cloud Era - Protect, Respect Personal Data

Building Trust in the Cloud Era - Protect, Respect Personal Data Cloud Expo Asia 18 May 2016 Building Trust in the Cloud Era - Protect, Respect Personal Data Stephen Kai-yi Wong Privacy Commissioner for Personal Data, Hong Kong The Hong Kong Data Protection Law The

More information

THE NEW GENERAL DATA PROTECTION REGULATION IMPLICATIONS FOR ENTERPRISES. Forum financier du Brabant wallon

THE NEW GENERAL DATA PROTECTION REGULATION IMPLICATIONS FOR ENTERPRISES. Forum financier du Brabant wallon THE NEW GENERAL DATA PROTECTION REGULATION IMPLICATIONS FOR ENTERPRISES Forum financier du Brabant wallon 14.12.2017 Data Protection should be part of every company s or organisation s DNA Do you process

More information

Introductory guide to data sharing. lewissilkin.com

Introductory guide to data sharing. lewissilkin.com Introductory guide to data sharing lewissilkin.com Executive Summary Most organisations carry out some form of data sharing, whether it be data sharing between organisations within the group or with external

More information

Manchester Metropolitan University Information Security Strategy

Manchester Metropolitan University Information Security Strategy Manchester Metropolitan University Information Security Strategy 2017-2019 Document Information Document owner Tom Stoddart, Information Security Manager Version: 1.0 Release Date: 01/02/2017 Change History

More information

Lichfield Cruising Club 2000 Ltd. Privacy Policy

Lichfield Cruising Club 2000 Ltd. Privacy Policy Who we are We are Lichfield Cruising Club 2000 Ltd. A private company limited by guarantee, Company Registration Number 4102591 (England and Wales). We are a private boat club, our Registered Office Address

More information

Creative Funding Solutions Limited Data Protection Policy

Creative Funding Solutions Limited Data Protection Policy Creative Funding Solutions Limited Data Protection Policy CONTENTS Section Title 1 Introduction 2 Why this Policy Exists 3 Data Protection Law 4 Responsibilities 5 6 7 8 9 10 Data Protection Impact Assessments

More information

This Policy has been prepared with due regard to the General Data Protection Regulation (EU Regulation 2016/679) ( GDPR ).

This Policy has been prepared with due regard to the General Data Protection Regulation (EU Regulation 2016/679) ( GDPR ). PRIVACY POLICY Data Protection Policy 1. Introduction This Data Protection Policy (this Policy ) sets out how Brital Foods Limited ( we, us, our ) handle the Personal Data we Process in the course of our

More information

Rights of Individuals under the General Data Protection Regulation

Rights of Individuals under the General Data Protection Regulation Rights of Individuals under the General Data Protection Regulation 2018 Contents Introduction... 2 Glossary... 3 Personal data... 3 Processing... 3 Data Protection Commission... 3 Data Controller... 3

More information

Order of Malta Volunteers Privacy Statement

Order of Malta Volunteers Privacy Statement Order of Malta Volunteers Privacy Statement The Order of Malta Volunteers ( the OMV, We, Us ), is a charity registered in England and Wales with charity number 1164242. Its registered address is 13 Deodar

More information

BRIDGEWATER SURGERIES. Privacy Notice

BRIDGEWATER SURGERIES. Privacy Notice BRIDGEWATER SURGERIES Privacy Notice We understand how important it is to keep your personal information safe and secure and we take this very seriously. We have taken steps to make sure your personal

More information

IN THE FRAME. Computacenter Public Sector Frameworks FRAMEWORK

IN THE FRAME. Computacenter Public Sector Frameworks FRAMEWORK IN THE FRAME Computacenter Public Sector Frameworks FRAMEWORK SOLUTION PUBLIC SECTOR FRAMEWORK ACCELERATE TRANSFORMATION Put digitalisation in the fast lane with cost-effective, compliant and centralised

More information

Industrial control systems

Industrial control systems Industrial control systems Attractive targets for cyber-attacks A five-point strategy for a secure environment The risk of a cyber-attack is real and continues to rise Cyber threats to industrial control

More information

Getting ready for GDPR

Getting ready for GDPR Getting ready for GDPR Cybersecurity for Data Protection Brought to you by: What is GDPR? The (GDPR) is the European Union s response to the increasing privacy demands of the European society. The primary

More information

Element Finance Solutions Ltd Data Protection Policy

Element Finance Solutions Ltd Data Protection Policy Element Finance Solutions Ltd Data Protection Policy CONTENTS Section Title 1 Introduction 2 Why this Policy Exists 3 Data Protection Law 4 Responsibilities 5 6 7 8 9 10 Data Protection Impact Assessments

More information

Meeting GDPR requirements in your S2 Security environment

Meeting GDPR requirements in your S2 Security environment white paper Meeting GDPR requirements in your S2 Security environment May 2018 What is GDPR? The European Union s General Data Protection Regulation (GDPR) takes effect May 25, 2018 and applies to all

More information

General Data. Protection Regulations MAY Martin Chapman Head of Ops & Sales Microminder. Presentation Micro Minder Ltd 2017

General Data. Protection Regulations MAY Martin Chapman Head of Ops & Sales Microminder. Presentation Micro Minder Ltd 2017 General Data Please note: - This legislation is untested and open to interpretation. - I am not a Privacy or Data Protection Solicitor. - Should you have any concerns or queries please seek legal advice

More information

PRIVACY NOTICE WHO WILL PROCESS YOUR PERSONAL INFORMATION? WHY IS YOUR PERSONAL INFORMATION REQUIRED?

PRIVACY NOTICE WHO WILL PROCESS YOUR PERSONAL INFORMATION? WHY IS YOUR PERSONAL INFORMATION REQUIRED? PRIVACY NOTICE First Capital Independent Financial Advisers Limited understands its obligations in regards to your fundamental right to a private life and has implemented systems and controls to ensure

More information

GDPR Impacts. SEV GDPR Workshop Athens Giles Watkins, UK Country Leader. Wednesday 7th February,

GDPR Impacts. SEV GDPR Workshop Athens Giles Watkins, UK Country Leader. Wednesday 7th February, GDPR Impacts SEV GDPR Workshop Athens Giles Watkins, UK Country Leader Wednesday 7th February, 2018 Agenda What is the Privacy Opportunity? What is different under GDPR? Where organisations are focusing?

More information

Federal Government. Each fiscal year the Federal Government is challenged CATEGORY MANAGEMENT IN THE WHAT IS CATEGORY MANAGEMENT?

Federal Government. Each fiscal year the Federal Government is challenged CATEGORY MANAGEMENT IN THE WHAT IS CATEGORY MANAGEMENT? CATEGORY MANAGEMENT IN THE Federal Government Each fiscal year the Federal Government is challenged to accomplish strategic goals while reducing spend and operating more efficiently. In 2014, the Federal

More information

NCAS SUBJECT ACCESS REQUEST FORM (DATA PROTECTION ACT 1998)

NCAS SUBJECT ACCESS REQUEST FORM (DATA PROTECTION ACT 1998) (Please note that this form should not be used by a patient wishing to access health records about them held by a local healthcare organisation (e.g. hospital, GP surgery, dental practice, pharmacy). The

More information

It applies to personal information for individuals that are external to us such as donors, clients and suppliers (you, your).

It applies to personal information for individuals that are external to us such as donors, clients and suppliers (you, your). Our Privacy Policy 1 Purpose Mission Australia is required by law to comply with the Privacy Act 1988 (Cth) (the Act), including the Australian Privacy Principles (APPs). We take our privacy obligations

More information

Enviro Technology Services Ltd Data Protection Policy

Enviro Technology Services Ltd Data Protection Policy Enviro Technology Services Ltd Data Protection Policy 1. CONTEXT AND OVERVIEW 1.1 Key details Rev 1.0 Policy prepared by: Duncan Mounsor. Approved by board on: 23/03/2016 Policy became operational on:

More information

DATA PROTECTION POLICY

DATA PROTECTION POLICY 1 Your Data Protection Responsibilities DATA PROTECTION POLICY 1.1 Everyone has rights with regard to how their personal data is handled. Personal data is any information that a person can be identified

More information

GDPR Policy WECare Worldwide

GDPR Policy WECare Worldwide GDPR Policy WECare Worldwide MAY 2018 GDPR policy, WECare Worldwide WECare 1 WECare Worldwide s commitment to GDPR WECare Worldwide ( WECare ) is both a UK registered charity (1162386) and a Sri Lankan

More information

How to Request Information from Cardiff Metropolitan University

How to Request Information from Cardiff Metropolitan University How to Request Information from Cardiff Metropolitan University Cardiff Metropolitan University is committed to the principles of openness and transparency. It looks favourably on any requests for information

More information

Project Better Energy Limited s registered office is Witan Gate House, Witan Gate West, Milton Keynes, Buckinghamshire, MK9 1SH

Project Better Energy Limited s registered office is Witan Gate House, Witan Gate West, Milton Keynes, Buckinghamshire, MK9 1SH PRIVACY NOTICE Curv360 is a part of the Project Better Energy Limited group of companies and is a controller of any personal data you provide. We respect your data and your privacy is important to us.

More information

This Privacy Policy applies if you're a customer, employee or use any of our services, visit our website, , call or write to us.

This Privacy Policy applies if you're a customer, employee or use any of our services, visit our website,  , call or write to us. Privacy Policy Background This policy explains when and why we collect personal information about you; how we use it, the conditions under which we may disclose it to others and how we keep it secure.

More information

Our agenda. The basics

Our agenda. The basics GDPR - AVG - RGPD. Our agenda The basics Key actions Responsibilities The basics Key actions Responsibilities Who cares? Why? From directive to regulation 24 Oct 1995: a Directive 95/46/EC is adopted partially

More information

PRIVACY POLICY. 1. Introduction

PRIVACY POLICY. 1. Introduction PRIVACY POLICY 1. Introduction 1.1. The Pinewood Studios Group is committed to protecting and respecting your privacy. This privacy policy (together with our Website Terms of Use and Cookies Policy) (Privacy

More information

CEM Benchmarking Privacy Policy

CEM Benchmarking Privacy Policy CEM Benchmarking Privacy Policy Final Draft: 18/05/18 Next Review Date: 22/05/19 Page 1 Contents Page 1 Outline 3 2 Categories of personal data 3 3 Sources of personal data 3 4 Purposes 4 5 Lawful basis

More information

If you start the process of wanting to purchase a property or unit from us, we may also collect the following information from you:

If you start the process of wanting to purchase a property or unit from us, we may also collect the following information from you: Privacy Notice WHO ARE WE? We are Stirlin Group Limited, which, for the purposes of this policy, includes Stirlin Developments Limited and Lodge Lane Developments Limited, trading as Homes by Stirlin.

More information

Using Blockchain for Consent and Access to Private and Sensitive Data in the GDPR Environment

Using Blockchain for Consent and Access to Private and Sensitive Data in the GDPR Environment Using Blockchain for Consent and Access to Private and Sensitive Data in the GDPR Environment Gary Leeming, Chief Technology Officer Connected Health Cities, University of Manchester 1 Connected Health

More information