Keoghs GDPR Update - April 2018

Click here for a background overview.

Progress as of April 2018

Keoghs’ GDPR project is now in full swing and with 25 May approaching, the various business teams are making the relevant changes to internal policies and processes, as well as kicking off the GDPR training modules for all staff.

There are defined budgets, project owners and tasks for each project section below, with staff across functions working towards filling the gaps we have identified.

1. Corporate Compliance
2. Data Protection
3. Data Management
4. IT Security
5. Learning & Awareness

While actions are undertaken across all areas there are a number of themes worth mentioning:

• Data Flow Mapping – having completed the legal and business process data discovery phase of the project, we are now working on pulling the data out to create our Records of Processing evidences.
• Supplier Due Diligence – understanding our key suppliers, GDPR provisions and controls continues, with further auditing underway to complete the Keoghs Supplier Assessment Register.
• Data Protection Management System ¬– we hope to announce soon that Keoghs has invested in a dedicated Data Protection Management System. The plan is to use this system to hold and manage all of the good work we have undertaken over the last year. We will then use the tool to help control and improve our data protection processes and evidences going forward.
• GDPR Awareness & Training ¬– The internal awareness campaign has continued; with our own Datagator mascot now a firm fixture across all sites.

We have also developed a custom GDPR training package for all staff to complete prior to 25 May, which ensures that all staff understand the increased importance and implications of manging our personal data correctly.

We are still on schedule as planned and confidence of success is high.

Keoghs GDPR Statement

Keoghs appreciates the importance of the prudent management of all its data and as such has embraced the EU General Data Protection Regulation (2016/679) as an extension of the UK Data Protection Act (1998). As a firm, Keoghs is taking all steps to ensure compliance with the regulation in advance of 25 May 2018. While there is no official certification of compliance, we are confident from the analysis and project work undertaken already that the firm will be able to ensure a suitable level of conformity in line with the regulation and the ICO’s guidance.

As a firm, we commit to keeping our clients and partners up-to-date on our progress as well as make a statement when we believe we have achieved a suitable level of compliance with the regulation.

We will look to make an official statement on our GDPR page in advance of the 25th May ‘18

Further Information

For further information on Keoghs GDPR journey, please contact your client account manager or see our dedicated GDPR webpage at https://www.keoghs.co.uk/GDPR for updates.