Welcome to ADAVISTA
Specialists in implementing and/or utilising:
General Data Protection Regulation (GDPR) (Abridged)
Freedom of Information Act 2000
The Information Commissioners Office (ICO) is the supervisory authority for Data Protection in the United Kingdom and for Freedom of Information in England and Wales.
On 25th May 2018 new data protection legislation was implemented across the UK.
Four letters – G D P R – have been striking terror into people in the business world for quite a while as there have been many myths circulating. This has caused much confusion.
This has been so great that people have not realised that there is a second piece of legislation that came into effect on the same day as the abridged version of GDPR. This is the Data Protection Act 2018 which sits alongside the GDPR and should be implemented at the same time.
So what can we do for you?
Firstly we suggest a consultation. One of the legal requirements of GDPR is 'Data Protection by design and by default'. We write a Data Audit Report based on our site visit or over the phone consultation
Produce straightforward, concise documentation to reflect your organisation's activities whilst meeting the ICO Guidance requirements
Produce the requisite Privacy Notices, again following the ICO guidance requirements. These too, are concise and in plain language
Help individuals put forward 'Subject Access Requests' (SAR) to obtain copies of personal data held on them
Advise organisations on how to respond if they receive a 'Subject Access Request' (SAR)
Staff training can be provided with formal courses/presentations or informal handouts
DATA PROTECTION BY DESIGN AND BY DEFAULT – not exactly new but it is best practice under DPA but a legal requirement under GDPR. "I have found a privacy notice on someone else's site and amended that" does not make you compliant under GDPR – it has to fit and be able to demonstrate that it fits your business.
ACCOUNTABILITY – now be "officially" transparent about how you process personal information by having the appropriate documentation in place.
PRIVACY NOTICES – what was originally called the Privacy Policy on websites. – now requires additional information to be included.
What documents need notices/disclaimers?
A Privacy Notice is required regardless of whether or not you have a website
Electronic or paper forms may require disclaimers
Terms & Conditions, Contracts and Service Level Agreements may need some terminology
Effectively we give you a piece of text to add to your existing documents, except the Privacy Notice, which REPLACES your old Privacy Policy
TOO MUCH TO THINK ABOUT?
So let us do the thinking for you and take on the responsibility.