Data Protection Policy
The Data Protection Act 2018 requires that anyone processing personal data must comply with the eight enforceable principles of good practice. Families Contact will comply with these requirements by ensuring that:
Key Compliance Measures
- FCS has conducted an information audit to map data flows.
- FCS has identified lawful bases for processing and documented them.
- FCS has reviewed how consent is asked for and recorded.
Consent and GDPR Compliance
The GDPR sets a high standard for consent but remember you don’t always need consent. Assess whether another lawful basis is more appropriate.
Consent to process children’s personal data for online services is required. If your business offers online services directly to children, privacy information should be communicated in an understandable way. Children must receive the same fair processing information as adults, along with explanations of the risks and safeguards in place.
Registration and Privacy Notice
- Registered with the Information Commissioner’s Office.
- To fulfil obligations to data subjects’ right to be informed, everyone receives a copy of the privacy notice.
- Families Contact has a process to recognize and respond to individuals’ requests to access their personal data.
Individuals’ Rights
Individuals have the right to obtain:
- Confirmation that their data is being processed.
- Access to their personal data.
- Other supplementary information corresponding to the privacy notice.
Data Accuracy and Security
- Processes to ensure personal data remains accurate and up to date.
- A process to securely dispose of personal data no longer required or upon request.
- Procedures to respond to requests to restrict processing of personal data.
- Processes for individuals to move, copy, or transfer their personal data securely.
- Procedures to handle objections to the processing of personal data.
- Processes to identify, report, manage, and resolve personal data breaches.
These measures are all included in the Privacy Policy.