Letting agent registration: privacy impact assessment
Assessment considering any potential privacy impacts that result from the implementation of the registration of letting agents.
Incorporating Privacy Risks into planning
Explain how the risks and solutions or mitigation actions will be incorporated into the project/business plan, and how they will be monitored. There must be a named official responsible for addressing and monitoring each risk.
| Risk |
Ref |
How risk will be incorporated into planning |
Owner |
|---|---|---|---|
| Data stored by IT provider. |
Data controller-processor contract to be established. |
Charlotte McHaffie, Project Manager |
|
| Release of personal data due to insecure IT system. |
Consideration of cyber security issues during initial IT system development. Provision of enough time to undertake robust penetration testing of the system. |
Charlotte McHaffie, Project Manager |
|
| Personal data compromised through inappropriate sharing of personal data in the administration and processing of applications. |
Time allocated in project plan for the development and agreement of Information sharing agreements and protocols. Time allocated for training registration staff on privacy issues and data handling. |
Charlotte McHaffie, Project Manager |
Contact
Email: PRS Regulation Team
There is a problem
Thanks for your feedback