GDPR & Data Protection Act compliance statement

Intersys considers Data Protection (and thereby GDPR / DPA) a fundamental element of our operating model.

• Intersys maintains ISO27001 accreditation, demonstrating our strong commitment to compliance.
• Intersys maintains Cyber Essentials Plus certification
• Intersys maintains strong ISMS and Risk Management Frameworks
• Intersys’ policies reflect the importance to the business of Information and Data Security. Data Protection forms part of our Legal, Regulatory and Compliance Policies.
• Intersys is registered with the Information Commissioner’s Office (ICO), who are the UK’s Statutory Authority for Data Protection. Our registration number is 00045020510.
• Intersys is aware of our obligations under GDPR, much of which aligns with our ISO27001 certification programme; a commitment is made at board level to maintain ISO27001 accreditation and compliance with Data Protection legislation.
• Intersys does not routinely process Special Category Data (GDPR Article 9) and does not systematically use or process personal data on a large scale.
• All Intersys staff are trained to understand Data Security and GDPR / DPA and are subject to ongoing testing.
• All Intersys staff are made aware of GDPR issues and how to identify PII (Personally Identifiable Information) within our organisation.
• Intersys is committed to ensuring that we have a Lawful Basis to process information, including consensual (including a mechanism for consent to be withdrawn), contractual and legal obligation bases.
• Intersys employs high levels of data security and encryption standards (during transmission and at rest), throughout the organisation.
• Intersys maintains Enterprise Security standards , including within our Supply Chain and supplier base.
• Intersys’ Operational Resilience, BCP, Breach and Response and Disaster Recovery Plans are reviewed regularly and tested routinely
• Intersys guidance on GDPR compliance (first drafted in 2016) can be found here: The 8 week GDPR Compliance Plan – Intersys https://intersys.co.uk/legal/the-8-week-gdpr-compliance-plan/

Find out more about our Ensure Data Protection Compliance consultancy and services here: https://intersys.co.uk/it-consulting-services/data-protection-consultancy/