to the within 72 hours of the Information Commissioner’s Office (“ICO”) breach occurring. The DPO must also consider whether it is appropriate to notify those data subjects affected by the breach. Data Protection Officer (“DPO”) 8.1. A Data Protection Officer is an individual who has an over-arching responsibility and oversight over compliance by the Association with Data Protection laws. The Association has elected to appoint a Data Protection Officer whose details are noted on the website Association’s and contained within the Fair Processing Notice at Appendix 3 hereto. 8.2 The DPO will be responsible for: 8.2.1 monitoring the compliance with Data Protection Association’s laws and this Policy; 8.2.2 co-operating with and serving as the contact for Association’s discussions with the ICO 8.2.3 reporting breaches or suspected breaches to the ICO and data subjects in accordance with Part 7 hereof. Data Subject Rights 9.1 Certain rights are provided to data subjects under the GDPR. Data Subjects are entitled to view the personal data held about them by the Association, whether in written or electronic form. 9.2 Data subjects have a right to request a restriction of processing their data, a right to be forgotten and a right to object to the Association’s processing of their data. These rights are notified to the Association’s tenants and other customers in the Fair Processing Association’s Notice.
to the Information Commissioner’s Office (“ICO”) within 72 hours of the breach occurring. The DPO must also consider whether it is appropriate to notify those data subjects affected by the breach. Data Protection Officer (“DPO”) 8.1. A Data Protection Officer is an individual who has an over-arching responsibility and oversight over compliance by the Association with Data Protection laws. The Association has elected to appoint a Data Protection Officer whose details are noted on the Association’s website and contained within the Fair Processing Notice at Appendix 3 hereto. 8.2 The DPO will be responsible for: 8.2.1 monitoring the Association’s compliance with Data Protection laws and this Policy; 8.2.2 co-operating with and serving as the Association’s contact for discussions with the ICO 8.2.3 reporting breaches or suspected breaches to the ICO and data subjects in accordance with Part 7 hereof. Data Subject Rights 9.1 Certain rights are provided to data subjects under the GDPR. Data Subjects are entitled to view the personal data held about them by the Association, whether in written or electronic form. 9.2 Data subjects have a right to request a restriction of processing their data, a right to be forgotten and a right to object to the Association’s processing of their data. These rights are notified to the Association’s tenants and other customers in the Association’s Fair Processing Notice.