Welcome to October’s edition of the iSTORM Data Protection Newsletter. Read on to discover the latest news from the world of data protection, along with updates on everything happening at iSTORM.
iSTORM Updates
September was another busy month for the iSTORM team, with new clients projects continuing alongside support across GDPR, Penetration Testing, Cyber Essentials, and ISO services implementation and audit. Our team also continued on a ISO 42001 implementation, with the client now preparing for their audit commencing in September.
September also saw the culmination of months of work to successfully implement and certify an ISO 42001 management system. Alongside this, multiple ISO management systems across a number of clients were reviewed, monitored, amended and managed throughout the month, helping organisations maintain their ongoing compliance and certification requirements.
We also carried out UAT testing on a new system, assessing its practicality and suitability for supporting GDPR requirements. Our work within our DSAR processing service has continued too, supporting clients in meeting their obligations to their customers and ensuring requests are managed effectively and within the required timescales.
Whatever your data protection challenge, we’re here to help.
When was the last time you checked your GDPR compliance?
There are a considerable amount of policy and procedural documents that are required under the GDPR, of which an audit schedule plan must be in place and the DPO should review changes to relevant policies prior to release to the business. There is also an expectation under the GDPR to maintain, review and keep up to date compliancy areas such as:
- Record of Processing Activity
- Legal Register and Interested Parties
- Assets and Supplier Lists
- Privacy Notices (Customer, Employee and Recruitment) and Cookie Notice.
- DSAR Log
- Incident Log
- Training Log and Materials
- Retention Schedules
- Policy and procedural reviews.
Let us support you: Take a look at your records, logs, trackers and policies. When were they last reviewed? Are they complete? Are they still accurate? Have things slipped because day-to-day work has taken priority?
Let us review what you have. Let’s create what you’re missing. Let’s fix what’s no longer working. Don’t just have iSTORM on paper. Have us with you.
Get in touch today to find out how we can support your organisation with its ongoing data protection requirements.
News
TikTok accepts £12.7 million children’s privacy fine
TikTok has withdrawn its appeal against the £12.7 million fine issued by the UK ICO for breaches including the unlawful processing of children’s data, inadequate removal of underage users and unclear privacy information. The company has also dropped its challenge to an ICO information notice relating to its separate investigation into how it uses the data of 13–17-year-olds in recommender systems. The original fine is now final. Source: PDP
Ten NHS staff removed from duty over alleged patient-record snooping
Ten employees of East Suffolk and North Essex NHS Foundation Trust have been removed from active duty or suspended amid concerns that they accessed the digital medical records of three year old Noah Woods without a legitimate clinical reason. The Trust has secured the records, launched an urgent investigation, apologised to Noah’s family and reported the incident to the ICO. Source: PDP
Training
Did you know it’s a legal requirement to ensure all employees and contractors are trained to handle personal data? From GDPR principles to breach response, data requests, and remote working, it’s your responsibility, and you must be able to evidence it.
iSTORM can help with bespoke training in any format: HR packs, team sessions, in-person workshops, or even voice-over training for your internal LLM. Don’t get caught out—proper training is the first thing regulators will ask for if something goes wrong.
Talk to us about what support we can provide!
Meet the Team…
Our friendly team of passionate Data Protection Specialists are here to help your team navigate your data protection challenges, and are happy to support you with all your queries.
More from iSTORM?
We can offer services including:
- GDPR/ Data Protection gap analysis and maturity reviews
- Auditing
- GDPR framework implementation support
- Outsourced Data Protection Officer Services (DPO)
- Data Protection Impact Assessments (Review & Completion)
- Data Flow Mapping
- Supplier Assurance Frameworks
- Policy and procedure writing
- Training and awareness (online and face to face)
We hope you have enjoyed this months data protection news roundup. For more information on any of the above, please email us at info@istormsolutions.co.uk or call +44 (0) 1789 608708.
