The NCSC (National Cyber Security Centre) have recently reported that they have detected more UK Government branded scams relating to coronavirus than any other subject. The FCA have published statements on their website regarding information security and the coronavirus. “The exceptional circumstances introduced by coronavirus have required firms to change their ways of working at […]
With so many data protection policies and GDPR documentation toolkits to choose from, how do you know which is right for you? Knowing which provider to use for your GDPR data protection compliance can be confusing, especially when you are buying the data protection templates online and can’t be sure what you are getting. This […]
Anti-money laundering is a general term that refers to legislation, regulations, requirements and rules on preventing terrorist financing, money laundering and criminal activities relating to money and transactions. Firms with obligations under these rules (i.e. the Money Laundering Regulations (MLR17) in the UK), are expected to put controls, tools and policies into place to identify […]
The FCA has published a statement regarding consumer protection and ongoing compliance during the Coronavirus (Covid-19) pandemic. The financial services and consumer credit regulator has emphasised that they still expect regulated firms to demonstrate a high-level of compliance when it comes to treating customers fairly and dealing with vulnerable customers, especially as the ongoing situation […]
The World is a very different place than it was a few weeks ago and businesses are now operating in a time of flux, with many not being able to operate at all. With so many employees working from home and contact with customers being made in new or different ways; you need to ensure […]
How robust your data protection program is may be being tested during this difficult time, with employees working from home and others in workplaces with an abundance of staff absences. Having compliant GDPR and DPA18 policies, procedures and controls in place is mandatory, but has never been so important. How you process personal data during […]
This article provides guidance on writing your own GDPR/DPA18 Policy and utilises the requirements set out under the General Data Protection Regulation (GDPR) and Data Protection Act 2018 (DPA18). What is a Data Protection Policy? The GDPR advises that controllers must implement appropriate technical and organisational measures to comply with the GDPR; with those measures […]
What is Legitimate Interests? This article looks at how to carry out a Legitimate Interests Assessment (LIA) and gives guidance on the suggested stages. Legitimate Interests is one of the legal basis for processing personal data under the GDPR. Article 6(1)f of the Regulation states: – “Processing is necessary for the purposes of the legitimate […]
Under the Senior Managers Regime, SYSC 25.9.4 of the FCA Handbook advises that Enhanced firms must take reasonable steps to ensure that a person becoming or taking over a role of a Senior Management Function (SMF) Manager, must be provided with adequate information and materials to enable them to carry out the job and their […]
If you have obligations under The Money Laundering Regulations 2017 (MLR17), you will need to have compliant policies, measures and processes in place to meet those obligations. Whether your Supervisory Authority is the FCA, HMRC or Gambling Commission, many of the requirements set by these bodies come from the MLR17 and require firms to have […]