General Data Protection Regulation (GDPR)
The General Data Protection Regulation (GDPR) is a comprehensive data protection regulation enacted by the European Union (EU) to safeguard the personal data and privacy rights of individuals within the EU and European Economic Area (EEA). GDPR sets strict guidelines for the collection, processing, and storage of personal data, aiming to empower individuals with greater control over their personal information.
Data protection is a paramount concern in today's digital landscape. We prioritize the security and privacy of our clients' and customers' data. Our service acts as a trusted intermediary between identity apps and online platforms, ensuring the confidentiality and integrity of personal information exchanged. Upholding the principles of data protection is not only a legal obligation but also essential for building trust and fostering long-term relationships with our clients and customers.
Roadmap
| Phase | Date | Description |
|---|---|---|
| ------------------ | --------------- | ---------------------------------------------------------------------------------------------------------- |
| Assessment Phase | December 2022 | Determine the need for the GDPR compliance project and secure necessary approvals. |
| Discovery Phase | Q4 2023 | Map out existing processes, policies and security measures. |
| Planning Phase | Q2 2024 | Develop a comprehensive project plan outlining tasks, timelines, resources, and budgets. |
| Gap Analysis | Q3 2024 | Conduct a gap analysis with current state and GDPR requirements. |
| Start of Implementation | Q4 2024 | Implementation of identified gaps. |
| Monitor | Ongoing | Ongoing efforts to uphold regulatory requirements with respect to the GDPR. |
Status
Please refer to our general Privacy Policy for more information on how we deal with personal data in our platform for both clients and customers. Any updates with respect to the GDPR regulation can be found on this documentation page. The implications of the GDPR and changes to our process are annually reviewed via the Data Protection Impact Assessment (DPIA).