Category: Data Transfer Management / Accountability
Customer: Government Agency
We worked with a Government agency to ensure that data protection compliance considerations were considered in their procurement process. We had to consider that the agency would procure products and services from a diverse supplier base. This required a robust process that could be flexible enough to apply to complex projects involving outsourcing high risk processing activities and to small suppliers who were providing services that carried negligible processing risks. We built a due diligence process that ensures the appropriate level of due diligence is applied and does not prevent smaller suppliers from engaging on the agency contracts while ensuring all compliance considerations are taken into account.
Sign-up to receive news and information from Fort Privacy
Fort Privacy processes your personal data in order to respond to your query and provide you with information about our products and services. Please see our Data Protection Statement for further information
Data Protection Programmes are all the rage these days. It’s great to see the compliance conversation moving in this direction. As a Data Protection Officer (DPO), I know the difference between working with a solid data protection programme and working with none and all.
Supplier due diligence is one of those exercises we think we will get around to eventually. Here’s a real story that illustrates how a supplier can let you down.
