Display Single Record

FOI Request

Disclosure ID
FOI/02167
Request Date
January 24, 2018
Subject
GDPR Preperation - Data Processing
Description
  1. How would you describe your GDPR preparedness?
    a. Already Compliant
    b. On target to be compliant by May 25th, 2018.
    c. Project underway but suffering difficulties
    d. Barely Started
    e. Haven’t started
  2. Have you identified all your data processing partners?
    a. Yes
    b. No
    c. Unsure
  3. Do you have contracts in place with all your data processing partners?
    a. Yes
    b. No
    c. Unsure
  4. Do you use a third party to provide data erasure or destruction services on your end of life IT infrastructure?
    a. Yes
    b. No
    c. Unsure
  5. If you use a third party, do you have a contract in place with them?
    a. Yes
    b. No
    c. Unsure
  6. How have you assessed “sufficient guarantees”
    from this company? (Please tick all that apply)
    In writing from them.
    Via Contract Terms.
    Relevant accreditation.
    Independent Assessment / audit.
  7. Does this contract include clarification on
    process for dealing with: (Please tick all that
    apply)?
    Breach Notification?
    Subject Access Requests
    Changes in processing activities which require
    a DPIA.
  8. If you use a third party what is their name?
  9. How regularly do you or an independent third
    party, audit this company?
    a. Never
    b. Every 6 Months
    c. Every 12 Months
    d. Irregularly but over 12 months
    e. Unsure
Response
  1. b. On target to be compliant by May 25th, 2018
  2. c. the Trust is currently undertaking a Trust wide audit.
  3. a. The Trust wide audit is to ensure that all data processing partners have been identified
  4. a. Yes
  5. a. Yes
  6. Via Contract Terms & relevant
    accreditation.
  7. Contract is as per normal supplier orders.
    Supplier checked via IG to make sure
    comply with standards prior to order
    placed.
    No hard drives leave the site before being
    crushed.
  8. Computer Disposals Limited
  9. c. Every 12 months
Attachment 1
Attachment 2
Attachment 3
Attachment 4
Attachment 5
Attachment 6
Attachment 7
Attachment 8
Attachment 9