The Institute of Professional Willwriters recognises the significance of data protection. The purpose of this policy is to protect all personal information controlled or processed by the organisation, and ensure an adequate level of awareness to ensure data protection principles are applied across all areas of operation within Institute of Professional Willwriters.
Personal data is identified and managed in accordance with the data protection risk assessment methodology that endorses the acceptable risk levels.
Our Data Protection Policy is achieved by a stringent set of controls, including policies, processes, procedures and software and hardware functions. These controls are monitored, reviewed and improved by the Board to ensure that specific data protection, security and business objectives are met. This is operated in conjunction with other business management processes, and incorporates the applicable statutory, regulatory and contractual requirements.
In particular, Institute of Professional Willwriters are committed to compliance with data protection requirements and good practice to include:
Our Data Protection Policy Awareness Program is incorporated in our staff induction and training program. The Data Protection policy is readily accessible internally and presented to existing and prospective clients. In addition to employees; suppliers, contractors and sub-contractors of IPW are expected to adhere to our Data Protection Policy.
Institute of Professional Willwriters are committed to continual improvement and all employees are empowered to take responsibility for data protection, with a robust process for identifying and reporting data breaches in place and subject to regular review.
Through compliance to applicable statutory, regulatory and contractual requirements, and the requirements of the General Data Protection Regulations (GDPR) for the Protection of Personal Information, Institute of Professional Willwriters will demonstrate confidence, integrity and credibility both internally and externally.