[email protected] | +44 (0) 1656 371735

Standard Procedures for Governance and Maintenance of Company Compliance (UK GDPR) Dose of Tech Services Ltd are committed to protecting and respecting data privacy in compliance with the UK General Data Protection Regulation (GDPR).

1. Overview

1.1 Data Protection

The GDPR lays down rules relating to the protection of natural persons with regard to the processing of personal data, including principles relating to consent, transparency, accuracy, data retention, rectification, and erasure of personal data.

1.2 Data Privacy and GDPR Compliance

Dose of Tech Services Ltd are committed to ensuring compliance with data protection legislation, including the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

2. Establishment and Governance

2.1 Reporting Structure

The Director of the Company will oversee GDPR compliance.

2.2 Delegated Authority

The Director has the authority to implement and enforce GDPR compliance measures.

3. Role

3.1 Assist with GDPR

The Director will ensure the Company fulfils its responsibilities under the GDPR, including implementing policies and practices to ensure compliance with the accountability principle.

4. Duties and Functions

4.1 GDPR Compliance

• Review GDPR and Guidance: Regularly review GDPR and guidance from the Information Commissioner’s Office.

• Data Audit: Conduct an internal audit of all data processed by the Company.

• Gap Analysis: Identify gaps in current documentation and measures, and implement necessary changes.

• Compliance Tasks: Identify and address any additional tasks necessary for GDPR compliance.

5. Membership

5.1 Composition

The Director will be solely responsible for GDPR compliance.

6. Quorum

6.1 Decision Making

All decisions regarding GDPR compliance will be made by the Director.

7. Frequency of Meetings and Timeframe

7.1 Meeting Schedule

The Director will review GDPR compliance on a quarterly basis or as needed.

8. General Matters and Authority

8.1 Resources

The Company will allocate necessary resources for GDPR compliance.

8.2 Training

The Director will ensure they are adequately trained on GDPR requirements.

8.3 Performance Review

The Director will review GDPR compliance performance annually and update policies as necessary.