whether anyone has been misled in how the data has been obtained whether the person from whom the information was obtained has been deceived or misled as to the purpose or purposes for which the data will be processed whether we have informed the data subjects of our identity, the purpose or purposes for the data are intended to be processed and anything else which we think is necessary in order to make the processing fair We will take reasonable steps to ensure the accuracy of the data - 'reasonable' depends on the purpose of the processing. Personal data processed for any purpose or purposes will not be kept for longer than is necessary and for that purpose data retention, review and deletion schedules are set up and implemented. The GDPR gives data subjects a number of rights, the foremost of which is the right to have access to their personal data where permitted under the GDPR. Data subject rights also include prevention of processing for direct marketing purposes and these rights will be considered in any marketing activities we may undertake. We have a duty to take appropriate technical and organisational measures against unauthorised or unlawful processing of personal data or accidental loss or destruction of, or damage to, personal data. Our Information Register and Risk Register takes this fact into account and appropriate policies and procedures will be maintained to protect against damage, loss or destruction of data. We will also take to ensure the reliability of any employees who have access to personal data. Data Protection and Staff Members Chambers holds information relating to employees, pupils, mini-pupils and barristers and is a Data Controller for that data under GDPR. Chambers may process both manually and by electronic means personal and sensitive personal data for the purposes of the administration and management of Chambers’ staff’s employment. There may be circumstances also where individual barristers may hold such information. Chambers may transfer part of the information held on employees to third parties where required to do so by law, including but not limited to HMRC. Chambers may also transfer information to third parties where it forms part of the administration of the employer/employee or membership relationship. Chambers may transfer employee information to companies and organisations that carry out processing operations as Data Processors, such as payroll companies and brokers. Chambers will only do this if the arrangement: is made or evidenced in writing the data processor will act only on instruction from us; and
whether anyone has been misled in how the data has been obtained whether the person from whom the information was obtained has been deceived or misled as to the purpose or purposes for which the data will be processed whether we have informed the data subjects of our identity, the purpose or purposes for the data are intended to be processed and anything else which we think is necessary in order to make the processing fair We will take reasonable steps to ensure the accuracy of the data - 'reasonable' depends on the purpose of the processing. Personal data processed for any purpose or purposes will not be kept for longer than is necessary and for that purpose data retention, review and deletion schedules are set up and implemented. The GDPR gives data subjects a number of rights, the foremost of which is the right to have access to their personal data where permitted under the GDPR. Data subject rights also include prevention of processing for direct marketing purposes and these rights will be considered in any marketing activities we may undertake. We have a duty to take appropriate technical and organisational measures against unauthorised or unlawful processing of personal data or accidental loss or destruction of, or damage to, personal data. Our Information Register and Risk Register takes this fact into account and appropriate policies and procedures will be maintained to protect against damage, loss or destruction of data. We will also take to ensure the reliability of any employees who have access to personal data. Data Protection and Staff Members Chambers holds information relating to employees, pupils, mini-pupils and barristers and is a Data Controller for that data under GDPR. Chambers may process both manually and by electronic means personal and sensitive personal data for the purposes of the administration and management of Chambers’ staff’s employment. There may be circumstances also where individual barristers may hold such information. Chambers may transfer part of the information held on employees to third parties where required to do so by law, including but not limited to HMRC. Chambers may also transfer information to third parties where it forms part of the administration of the employer/employee or membership relationship. Chambers may transfer employee information to companies and organisations that carry out processing operations as Data Processors, such as payroll companies and brokers. Chambers will only do this if the arrangement: is made or evidenced in writing the data processor will act only on instruction from us; and
BFC-Information-Management-Policy.docx