if you are looking at using a new electronic system for the storage of information, please talk to Ian Dolman first so that we can decide whether such a system is appropriately secure and complies with GDPR; if you are planning on sharing personal data with anybody new or with a party outside the FA structure then please speak to Ian Dolman before doing so who will be able to check that the correct contractual provisions are in place and that we have a lawful basis to share the information; if you receive a subject access request (or you think somebody is making a subject access request for access to the information we hold on them) then please tell [insert name] as soon as possible because we have strict timelines in which to comply; if you think there has been a data breach (for example you have lost personal data or a personal device which contains personal data or you have been informed that a coach has done so, or you have sent an email and open copied all contacts in) then please speak to Ian Dolman who will be able to help you to respond. If you have any questions at any time then please just ask Ian Dolman. We are here to help. Data protection principles Anyone processing personal data must comply with the enforceable principles of data protection. Personal data must be: processed lawfully, fairly and in a transparent manner; collected for only specified, explicit and legitimate purposes; adequate, relevant and limited to what is necessary for the purpose(s) for which it is processed; accurate and, where necessary, kept up to date; kept in a form which permits identification of individuals for no longer than is necessary for the purpose(s) for which it is processed; processed in a manner that ensures its security by appropriate technical and organisational measures to protect against unauthorised or unlawful processing and against accidental loss, destruction or damage; We are responsible for and must be able to demonstrate compliance with the data protection principles listed above.
if you are looking at using a new electronic system for the storage of information, please talk to Ian Dolman first so that we can decide whether such a system is appropriately secure and complies with GDPR; if you are planning on sharing personal data with anybody new or with a party outside the FA structure then please speak to Ian Dolman before doing so who will be able to check that the correct contractual provisions are in place and that we have a lawful basis to share the information; if you receive a subject access request (or you think somebody is making a subject access request for access to the information we hold on them) then please tell [insert name] as soon as possible because we have strict timelines in which to comply; if you think there has been a data breach (for example you have lost personal data or a personal device which contains personal data or you have been informed that a coach has done so, or you have sent an email and open copied all contacts in) then please speak to Ian Dolman who will be able to help you to respond. If you have any questions at any time then please just ask Ian Dolman. We are here to help. Data protection principles Anyone processing personal data must comply with the enforceable principles of data protection. Personal data must be: processed lawfully, fairly and in a transparent manner; collected for only specified, explicit and legitimate purposes; adequate, relevant and limited to what is necessary for the purpose(s) for which it is processed; accurate and, where necessary, kept up to date; kept in a form which permits identification of individuals for no longer than is necessary for the purpose(s) for which it is processed; processed in a manner that ensures its security by appropriate technical and organisational measures to protect against unauthorised or unlawful processing and against accidental loss, destruction or damage; We are responsible for and must be able to demonstrate compliance with the data protection principles listed above.
8ze79W7zRTyVTYOSKTJg_SUFC%20Data%20Protection%20Policy.docx