As with other areas of the Security section of our Information Centre, the Data Protection area is never going to be one that changes drastically, unless the GDPR rules are updated!

All businesses in the UK have to comply with Data Protection regulations, and the best source of information is the ICO. They have a specific area within their website that explains the Data Protection regulations for businesses, and that includes examples, which are often far more accessible than rafts of regulation.

In particular we’d recommend looking at the ICO Guide to Data Protection for organisations. they have a separate are for small businesses and sole traders. You can check whether you need to be registered with the ICO as a Data Processor here.

What about Data Protection within Baranov Associates?

In common with other businesses, we operate within the current legislation in relation to the processing of personal data.

We take clients’ privacy and the privacy of the information we process very seriously. We only use the personal information we gain access to to provide the services requested.

Our privacy notice is provided to all clients as part of our engagement process, at which point we also explain our process for secure communications and transfer of data, using the following:

• Cloud based software – WeTransfer (for secure file transfer) or Docusign (for secure electronic signature) including password protection.
• Emails – we will correspond by email that is not encrypted or password protected, but will exclude Personal Data other than clients’ names and email addresses.
• Post / hard-copy documents [by recorded delivery as a minimum] will only be sent as a last resort, for expediency and security.
• Our Document Transfer system is via WeTransfer, and available for client use to send documents to us, here.