| West Cork Health and Safety Services
|
||||||||||||
| General Data Protection Regulations
Policy Document
|
Version 2 | Rev 00 | Date: | March
2018 |
||||||||
| Purpose: | To ensure that personal data is only collected with permission, only necessary personal data is collected, all personal data is stored securely, personal data is only passed to other parties where necessitated by the delivery of service to clients and all data is not held longer than necessary to provide a service to clients or up to a legal statute of limitations. | |||||||||||
| Staff Involved: | General Manager and Training Co-ordinator | |||||||||||
| Method(s) used to carry out this procedure | Who does it | Evidence generated by this procedure | ||||||||||
| Permission obtained to collect personal data. | General Manager / Training Co-ordinator | Permission sought on all forms where personal data is collected | ||||||||||
| Only personal data necessary to provide a service to clients is collected. | General Manager / Training Co-ordinator | Only personal data necessary to communicate with clients and register qualifications on their behalf is collected. | ||||||||||
| All personal data collected is securely stored. | General Manager / Training Co-ordinator | Paper evidence is stored securely. Electronic evidence held on a secure drive. Evidence not to be stored on mobile devices. Evidence not to be stored on email servers. | ||||||||||
| Personal data is not passed to other parties unless as part of providing a service to clients | General Manager / Training Co-ordinator | Personal data is not passed to any party other than that necessitated by registering qualifications of clients | ||||||||||
| Personal data is not stored longer than necessary to provide service to clients. | General Manager / Training Co-ordinator | Data is only stored as long as it is necessary to obtain qualifications for clients or up to a legal statute of limitations. | ||||||||||
| Any breach of data protection regulations is reported to the Data Protection Commissioner. | General Manager / Training Co-ordinator | All data protection breaches are recorded. A record of necessary communication with the Data Protection Commissioner is kept. | ||||||||||