Business Office Support Services

The General Data Protection Regulation (GDPR) 2018 and ICO REGISTRATION

 

BOSS IW Business Office Support Services processes all personal data and/or sensitive personal data in accordance with legislation,  adheres to the principles of the GDPR and understands best practice for managing information.

 

Any data processing is undertaken in a secure and appropriate manner and BOSS IW takes appropriate security measures to protect data.

​

The EU General Data Protection Regulation (“GDPR”) came into force across the European Union on 25th May 2018 and brought with it the most significant changes to data protection law in two decades. Based on privacy by design and taking a risk-based approach, the GDPR has been designed to meet the requirements of the digital age.

 

The 21st Century brings with it broader use of technology, new definitions of what constitutes personal data, and a vast increase in cross-border processing. The new Regulation aims to standardise data protection laws and processing across the EU; affording individuals stronger, more consistent rights to access and control their personal information.

 

Our Commitment

We are committed to ensuring the security and protection of the personal information that we process, and to provide a compliant and consistent approach to data protection. We have always had a robust and effective data protection program in place which complies with existing law and abides by the data protection principles. However, we recognise our obligations in updating and expanding this program to meet the demands of the GDPR and the UK’s Data Protection Bill.

 

We are dedicated to safeguarding the personal information under our remit and in developing a data protection regime that is effective, fit for purpose and demonstrates an understanding of, and appreciation for the new Regulation. Our preparation and objectives for GDPR compliance  include the development and implementation of  policies, procedures, controls and measures to ensure maximum and ongoing compliance.

 

DATA PROTECTON AND SECURITY - REGISTRATION WITH THE INFORMATION COMMISSIONER'S OFFICE (ICO)

We  have a consistent level of data protection and security.  We are registered with the ICO and this can be checked on their website at www.ico.org.uk/register under reference ZA504773.

-       Information Audit - we regularly carry out an information audit to identify and assess what personal information we hold, where it comes from, how and why it is processed and if and to whom it is disclosed.

-        Policies & Procedures - we regularly revise data protection policies and procedures to meet the requirements and standards of the GDPR and any relevant data protection laws.