On 25 May 2019, the most significant piece of European data protection legislation to be introduced in 20 years will come into force. The EU General Data Protection Regulation (GDPR) replaces the 1995 EU Data Protection Directive. The GDPR strengthens the rights that individuals have regarding personal data relating to them and seeks to unify data protection laws across Europe, regardless of where that data is processed.
You can count on the fact that Adan Corporate is committed to GDPR compliance across its services. We are also committed to helping our customers with their GDPR compliance journey by providing robust privacy and security protections built into our services and contracts over the years.
With implementation of the General Data Protection Regulation (GDPR) imminent, we understand that, as a client or prospective client of Adan Corporate ("Adan"), you are likely to have some questions around what we have been doing and are doing, to prepare for GDPR. We have produced a series of frequently asked questions (FAQs) which should cover some, if not all, of those questions.
Data protection compliance is fundamental to our business and, as a result, Adan has taken a keen interest in GDPR since the draft text was first released as part of the EU's legislative process. Since then, we have been working diligently with our clients, contacts and our internal stakeholders to assess the potential impact of GDPR on our business and the industry more generally and to identify any changes that will need to be implemented to comply with the enhanced requirements set out in GDPR. Our GDPR readiness programme has been under way for some time now and is now in implementation phase. This means that we are working to a project plan that encompasses the major data assets across our business. It includes controls to review our processes and policies and our internal documentation for GDPR accountability standards.
To support our clients in managing their GDPR compliance, and in continued delivery of our services to our clients, we will be issuing GDPR standard contract terms that meet Article 28 processor requirements.
Yes, as a business reliant on market intelligence, compliance with data protection legislation is crucial and our Board members are fully supportive and engaged with our GDPR readiness programme.
We have appointed Chennakeshav Adya, as our Data Protection Officer (DPO). He is reachable at dpo@adancorporate.com for further enquiries.
Adan's GDPR readiness programme is well underway. We have, for some time now, been working with all business areas and stakeholders with a view to moving our business towards compliance with all GDPR requirements ahead of the 25 May 2019 deadline.
We see our GDPR programme as the first phase of a long term plan. As is the case for all organisations processing personal data, the important factor is not just to be compliant on 25 May 2019, but to maintain compliance on an ongoing basis. We have robust processes and procedures in place to manage compliance with existing data protection legislation and, as part of our GDPR readiness plan, we have reviewed those processes and procedures to ensure that they are fit for purpose under the new regime.
As mentioned above, as part of our GDPR readiness programme, we are working through all products, services and data processing activities undertaken by Adan in order to identify what, if any, changes will need to be implemented prior to 25 May 2019. This project is ongoing however, as mentioned above, GDPR does not, contain anything which, at a fundamental level, would prevent Adan from continuing to promote our current services.
Part of our GDPR readiness programme has involved assessing the processes and systems we already have in place to comply with rights currently available to data subjects under the Data Protection Act 1998. As part of this assessment we have also identified what, if any, changes will need to be implemented to ensure that we can, from 25 May 2019, comply with the enhanced rights set out in GDPR. As part of the transparency requirements, we will be working to ensure that individuals are aware of, and understand, when these rights apply.
Adan fully supports the drive towards greater transparency. Our corporate strategy seeks to put our customers at the heart of everything we do and, being open and transparent, is a crucial element of achieving this. We are working with all stakeholders within our business, industry bodies, suppliers and clients with a view to ensuring that all privacy notices and data collection notices that feed into our business will be compliant with these requirements in advance of the 25 May 2019 deadline. We have also been engaging with the Information Commissioner's Office (ICO) to ensure that the approach being taken is in line with the expectations, particularly in the critical area of credit information transparency.
Yes, the security of all data (including personal data) that we hold is highly important to us. Not only do we implement data security measures to protect it but we also have processes and procedures in place to ensure that, in the event of a breach, it will be detected, investigated and managed efficiently.
The core principles of PIAs can be applied to any project which involves the use of personal data, or to any other activity which could have an impact on the privacy of individuals. To date, Adan have not taken part in projects which use data in this way, should this change in the future, we will follow the ICO code of practice to ascertain whether a PIA is required.
Adan has implemented and uses technical measures and security policies that are aimed at protecting the personal data it has under its control from:
+ unauthorised access;
+ improper use or disclosure;
+ unauthorised modification;
+ unlawful destruction or accidental loss.
All Adan personnel are required to keep personal information confidential and only authorised persons have access to such information.
This Website contains links to other Websites. Adan is not responsible for the privacy practices or the content of such Websites.
If you have a complaint about how we have handled your personal data, contact the DPO at dpo@adancorporate.com and we will investigate your complaint. Please contact us via email at gdpr@adancorporate.com to instruct us to cease processing your personal data.
If you have any questions or comments about our GDPR policy or practices, please contact us via email at gdpr@adancorporate.com. Adan reserves the right to modify or update the GDPR policy at any time without notice.