Keoghs GDPR Update - January 2018

Click here for background and overview

Progress as of January 2018

Project works continue apace as the new year heralds Keoghs move from the design and planning phases into the delivery stages. The two primary streams of work currently active in January cover the following areas:

Data and Process Flow Mapping:

• Data discovery and mapping of all digital and physical data
• Information Asset Register update and expansion based on additional GDPR requirements
• Legal and business process mapping to overlay on the data discovery and information asset registers 

Training and Awareness:

January saw the arrival of a new GDPR mascot to help the Keoghs staff along the journey to compliance. His name is ‘Datagator’ and his communications have taken the form of mugs, posters, emails as well as thirty 3ft cardboard cut-outs spread across all offices with ‘data protection messages of the week’.

In tandem we have been building our own custom, legal focussed GDPR training materials, which are due to be released to all staff in March.

Other news:

We have also been keeping a close eye on the progress of the Data Protection Bill 2017-19 passing from the House of Lords to the House of Commons. It is clear that changes made at the last stage are massively positive for the insurance industry as a whole. The bill currently looks to include the insurance industry under ‘substantial public interest’ legal basis for processing, as well widen the scope of “Insurance Purpose” to include:

1. advising on, arranging, underwriting or administering an insurance contract,
2. administering a claim under an insurance contract, or
3. exercising a right, or complying with an obligation, arising in connection with an insurance contract, including a right or obligation arising under an enactment or rule of law.

There is still a lot of water to pass under the data protection bridge before the bill is enacted but this is a very positive sign and vindicates our agile approach to the project delivery to date.

Keoghs GDPR Statement

Keoghs appreciates the importance of the prudent management of all its data and, as such, has embraced the EU General Data Protection Regulation (2016/679) as an extension of the UK Data Protection Act (1998). As a firm, Keoghs is taking all steps to ensure compliance with the regulation in advance of May 25 2018. While there is no official certification of compliance, we are confident from the analysis and work undertaken already that the firm will be able to ensure a suitable level of conformity in line with the regulation and the ICO’s guidance.

As a firm, we commit to keeping our clients and partners up to date on our progress as well as making a statement when we believe we have achieved a suitable level of compliance with the regulation.

Further Information

For further information on Keoghs’ GDPR journey, please contact your client account manager or see our dedicated GDPR webpage at https://www.keoghs.co.uk/GDPR for updates.