"the safeguarding of the privacy rights in individuals in relation to the processing of personal data. Data Protection Acts 1998 and 2003 confer rights on individuals as well as responsibilities on those persons processing Personal data"
Is Client Data, at all times, safe and secure?
Do you have a written defined policy on retention periods for all personal data?
Do you have a procedure for archiving or deleting data relating to a former client?
Have you a confidentiality contract with all of your IT Support?
Is all data encrypted when leaving your office, ensuring your clients privacy?
Is client data stored off-site in a secure environment?
Do you have a documented disaster recovery plan and have you tested it?
""An investment intermediary must have adequate procedures for the maintenance, security, privacy and preservation of records.......so they are reasonably safeguarded against loss, unauthorised access, alteration or destruction"