Finance & Admin Director
We have led the UK CCTV compliance market since 1998 and from the early days of VHS tape based recording our continuing evolution has kept pace with the demands of a fast moving industry.
Whilst we continue to deliver the best in traditional paper based compliance documentation, we took the lead in developing a Cloud based audit and assessment service in 2010 which we now deliver throughout the UK.
Since then we have gone on to develop a unique package enabling Landlords to share CCTV & EACS images and data with tenants whilst complying with Data Protection Act legislation.
A natural progression led us to grow a multi discipline Cloud based Facilities Management Support tool badged as VeriFi Eidos, although we are pleased to develop bespoke solutions to run on the clients own server.
The combination of our innovative approach and the power of the Cloud to deliver everywhere in real time is best illustrated by our bringing the Daily Occurrence Book and Operator Logging into the 21st century. What was a paper based record kept by the security team is now an instantly accessible record of daily activity, available on a need to know basis, to those involved in the management of a single building or extensive property portfolio.
The scope of our services will continue to grow and develop, we don't have all the answers, but only because some questions are still waiting to be asked.
GENERAL DATA PROTECTION REGULATION (GDPR)
The EU GDPR will be adopted by the UK irrespective of BREXIT, the stated date for implementation is Friday 25th May 2018 when it becomes enforceable.
The Information Commissioner’s Office has revealed it will be publishing GDPR compliance guidance in stages over the intervening period – rather than as a single document – with each piece of guidance addressing a specific topic.
Many of the GDPR’s main concepts and principles are much the same as those in the current Data Protection Act (DPA), so if you are complying properly with the current law then most of your approach to compliance will remain valid under the GDPR and can be the starting point to build from. However, there are new elements and significant enhancements, so you will have to do some things for the first time and some things differently.
The GDPR applies to Data Controllers and Data Processors. The definitions are broadly the same as under the Data Protection Act. However under GDPR the Data Processor (Guarding Company) acting on behalf of a Data Controller (Landlord/Managing Agent) will have significantly more legal liability if responsible for a breach.
Organisations that carry out large data systematic monitoring of individuals and other data processing tasks will be required to appoint a Data Protection Officer reporting directly to the Data Controller at Board level. This role may be contracted out to specialist service provider such as VeriFi.
Penalties for non compliance levied by the ICO are currently limited to £500,000, however under GDPR the limit is increased to the equivalent of €20,000,000 or 4% of global turnover. Board and Personal liability may also result in financial penalties and/or imprisonment. The size of penalty imposed in the case of mismanagement of CCTV or Access Control Data etc., is a matter for conjecture, however damage caused by sensational media attention may have a far bigger impact on your organisations reputation.
From the perspective of personal data processing by Security & Surveillance systems there is no need for our clients to make any immediate changes. We will review processes and procedures as relevant compliance guidance is issued by the Information Commissioners Office and keep you informed as necessary.
REQUEST A QUOTE
REQUEST A QUOTE