Compliance # Type Requirement 38 Mandatory Data protection Jersey expects to introduce legislation equivalent to the General Data Protection Regulation (GDPR) before May 2018. The Digital Identity Service therefore shall comply with GDPR. Tenderers should provide details of how they will comply with GDPR including: The data sources that they propose to use and how they will be accessed, cleansed and governed. Where personal data will be held. Ideally personal data should be held in Jersey or the UK. Alternatively, personal data may be held within the EU. The basis for processing personal data. Any sharing of personal data with third parties and the basis for doing so. 39 Optional AML/CFT The Digital Identity Service shall support the creation and maintenance of digital identities that meet the identification requirements of the States of Jersey AML/CFT regulations. 40 Mandatory Independent Audit The Digital Identity Service undergo independent audit at least annually covering all aspects of the service including performance against the States of Jersey requirements. The auditor’s report shall be made available to the States of Jersey.
Compliance # Type Requirement 38 Mandatory Data protection Jersey expects to introduce legislation equivalent to the General Data Protection Regulation (GDPR) before May 2018. The Digital Identity Service therefore shall comply with GDPR. Tenderers should provide details of how they will comply with GDPR including: The data sources that they propose to use and how they will be accessed, cleansed and governed. Where personal data will be held. Ideally personal data should be held in Jersey or the UK. Alternatively, personal data may be held within the EU. The basis for processing personal data. Any sharing of personal data with third parties and the basis for doing so. 39 Optional AML/CFT The Digital Identity Service shall support the creation and maintenance of digital identities that meet the identification requirements of the States of Jersey AML/CFT regulations. 40 Mandatory Independent Audit The Digital Identity Service undergo independent audit at least annually covering all aspects of the service including performance against the States of Jersey requirements. The auditor’s report shall be made available to the States of Jersey.
ITT-DIgital-Identity-Statement-of-Requirements-Final-Version-for-Publication.docx