The U.K. Information Commissioner’s Office has published updated guidance on special category data under the EU General Data Protection Regulation. The revamped guidance has a template for an appropriate policy document, which organizations use to outline compliance measures and retention policies when data is processed. It also includes definitions on the special categories of data, the rules on such information and the conditions for processing. “There is more to do when processing special category data, but the provisions are in place to help you protect the data of those whose information you hold, and increase their confidence in you. It’s worth taking the time to get it right,” ICO Director for Regulatory Assurance Ian Hulme wrote in a blog post.
If you want to comment on this post, you need to login.