Data Protection
Insight can help organisations ensure they are fully aware of their obligations under the 1998 Data Protection Act as well as advising them on the practical steps that need to be taken in order to become compliant. These include:
- Undertaking the notification process
- Auditing the purposes for which your organisation processes personal information
- Establishing the data protection management structure necessary to ensure compliance
- Developing appropriate data protection and related policies and procedures to provide the framework for compliance
- How to maintain ongoing compliance through the use, for example, of a security awareness programme
- Training staff with responsibility for data protection compliance.
Datasheets
Case studies
Training courses
Related topics
The countermeasures database in the CRAMM information security toolkit includes a group of security controls specifically for organisations that hold personal data about individuals.