Reducing the risk of data breaches when transferring and sharing data

Fostering Providers are both Data Controllers and Data Processors. The UK GDPR and Data Protection Act define specific accountabilities upon both controllers and processors, it is important to understand what these accountabilities are. In our new online seminar, we will look at the requirement to implement technical controls to protect personal information in the context of data transfers.

Article 32 (1) of the GDPR states “… the controller and the processor shall implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk…”

In itself, this is helpful in that it is clear that controllers and processors of personal information must protect data using technical and organisational measures. It is less useful in that although suggesting some of these measures, it uses the Latin inter alia, which means ‘among other things’.

So where does that leave fostering providers bearing in mind that Article 32 (1.d) states that controllers and processors must also initiate “… a process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of the processing…”.

One of the most risky activities providers undertake with the personal information that they guard so preciously is transferring data. Whether agencies manage internal or external transfers, a failure to do so securely is a breach of the UK GDPR.

In order to implement and assess these measures requires a basic understanding of information security controls.

To help providers make informed decisions, the NAFP will host a Guardian Saints online seminar to explore the different types of data transfer, which transfers are already protected, how technical controls work and how you can assess them.

The session seeks to explain complex subjects in layman’s terms to enable providers to make informed decisions. If you are interested please register your attendance by clicking the button below.