Data protection
The best organisations take great care to protect data, seeing it as an essential part of treating employees and customers fairly. To do this, they need to have a robust data protection system in place to ensure compliance with legislative obligations.
Data protection
framework
GoodCorporation’s Data Protection Framework can be used to help organisations ensure that all the personal data they collect in the course of their operations is properly protected and responsibly used. This Framework covers the key areas necessary for businesses to effectively implement and maintain best practice data protection. This includes:
management and governance;
risk assessments;
creating secure environments;
keeping up to date with legislation;
operational data practices;
employee and third party awareness;
managing data access requests;
dealing with data breaches, and
monitoring and reviewing processes.
The four-page framework can be applied to the protection of both personal and commercial data and can be used to design, embed or evaluate an organisation’s data protection systems and culture.
Key steps to good data management
Demonstrating management commitment
Conducting thorough risk assessments
Maintaining a strong information security environment
Monitoring the legal environment
Managing employees who handle data
Controlling third party access to data
Handling requests from data subjects properly
Dealing with breaches swiftly and effectively
Conducting audits and reviews
If an organisation can’t demonstrate that good data protection is a cornerstone of their business policy and practices, they’re leaving themselves open to enforcement action that can damage their public reputation and possibly their bank balance. That makes data protection a boardroom issue.
Elizabeth Denham
Related news and insights
GDPR fines – what this means for business
It’s been a busy summer for the Information Commissioner’s Office (ICO) which has announced more...
Europe’s data privacy revolution is far from over
As GDPR came into force, it led to an avalanche of notifications and data protection...
