{"id":66624499,"date":"2018-06-20T15:58:31","date_gmt":"2018-06-20T14:58:31","guid":{"rendered":"https:\/\/www.fors-online.org.uk\/cms\/?page_id=66624499"},"modified":"2024-10-30T10:20:47","modified_gmt":"2024-10-30T10:20:47","slug":"fors-data-protection-policy","status":"publish","type":"page","link":"https:\/\/www.fors-online.org.uk\/cms\/fors-data-protection-policy\/","title":{"rendered":"FORS Data Protection Policy"},"content":{"rendered":"

1. Purpose and Scope<\/strong><\/span><\/p>\n

FORS recognises and supports the need for reasonable protections regarding the privacy and data protection of Personally Identifiable Information (PII), as defined below. For this reason, FORS is adopting a consistent \u2018Data Protection\u2019 process for storing and handling individuals\u2019 data based on globally accepted privacy principles and data protection legislation.<\/p>\n

This procedure governs all aspects of how FORS provides privacy disclosures and choices to individuals and the treatment of PII once FORS is in possession of it; including the collection, use, sharing, and storing of the information.<\/p>\n

2. Procedure<\/strong><\/span><\/p>\n

PII will be:<\/p>\n

a. Processed lawfully, fairly and in a transparent manner in relation to the individual (\u2018lawfulness, fairness and transparency\u2019);<\/p>\n

b. Collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes, without prior written consent;<\/p>\n

c. Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;<\/p>\n

d. Accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that PII that is inaccurate, having regard to the purposes for which it is processed, is erased or rectified without delay (\u2018accuracy\u2019);<\/p>\n

e. Kept in a form which permits identification of individuals for no longer than is necessary for the purposes for which the data are processed; and<\/p>\n

f. Processed in a manner to ensure appropriate security of the PII, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures (\u2018integrity and confidentiality\u2019).<\/p>\n

It is FORS policy to establish procedures, controls and oversight necessary to safeguard PII in accordance with applicable laws and regulations, as well as the FORS Privacy Statement.<\/a><\/p>\n

This procedure formalises FORS commitment to safeguarding privacy, including but not limited to, displaying comprehensive disclosures relating to how FORS collects, uses, stores and shares PII, and incorporating “privacy by design” principles into its processes that involve PII.<\/p>\n

All FORS functional leaders and support staff whose responsibilities include accessing, collecting, processing or storing PII are expected to assist in the protection of that data by adherence to this procedure.<\/p>\n

2.1<\/strong>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Access to PII<\/strong><\/p>\n

FORS documents procedures to comply with the FORS Privacy Statement together with the FORS Terms and Conditions for requesting, modifying or terminating access to PII.<\/p>\n

2.2<\/strong>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Data Use Guidelines<\/strong><\/p>\n

The following are general Do\u2019s and Don\u2019ts for safe use of FORS data, classified as Personally Identifiable Information (PII):<\/p>\n