You must regularly review, and where necessary, update your privacy information.User testing is a good way to get feedback on how effective the delivery of your privacy information is.It is often most effective to provide privacy information to people using a combination of different techniques including layering, dashboards, and just-in-time notices.The information you provide to people must be concise, transparent, intelligible, easily accessible, and it must use clear and plain language.There are a few circumstances when you do not need to provide people with privacy information, such as if an individual already has the information or if it would involve a disproportionate effort to provide it to them.If you obtain personal data from other sources, you must provide individuals with privacy information within a reasonable period of obtaining the data and no later than one month.You must provide privacy information to individuals at the time you collect their personal data from them.You must provide individuals with information including: your purposes for processing their personal data, your retention periods for that personal data, and who it will be shared with.This is a key transparency requirement under the UK GDPR. Individuals have the right to be informed about the collection and use of their personal data.International data transfer agreement and guidance
International transfers after the UK exit from the EU Implementation Period Ransomware and data protection compliance The institute's guidance regarding convictions and court findings and guidance regarding bankruptcy and IVAsprovides information for members and registered students about self-reporting in such circumstances.Rights related to automated decision making including profiling become bankrupt or made any arrangement or composition with his or her creditors generally.
This would include where a member or registered student has: The CIPFA duty to inform includes a duty on members and registered students to self-report where a member or registered student has acted in a manner which makes him or her liable to action under the institute's disciplinary scheme. Guidance on the last of these duties (PDF, 79 KB) has been issued by CIPFA Council. a duty to bring to the attention of the Institute facts which suggest that a member or registered student may be liable to disciplinary action.