Enterprise Security Assessment > Data and Asset Security > Asset and Information Management

Do you have a procedure for information handling consistent with its classification?

book reader icon
1 Minute
11/14/2024
facebook logo gray
linkedin logo gray
mail logo gray

Yes. QR Planet is fully GDPR complient. All information is stored, processed and communicated consistent with its classification and in accordance to all regulatory measures and compliance requirements; This is especially the case for Personal Information.

This procedure has been approved and is monitored by management and is being communicated to all appropriate Constituents. Management and consultants maintain the procedure and review it regularly to keep it up to current standards.

Last update 2 weeks ago

Does QR Planet handle any client scoped data that can be classified as personal information or data of individuals?

The handling of client scoped data that includes any such classification happens in full compliance with the GDPR. This is reviewed by Data Protection Officers.

Do you handle client scoped data that can be classfied as personally identifiable financial information under the Gramm-Leach-Bliley Act (GBLA)?

No. QR Planet renders no financial services at all, especially such requiring us to fall under the rules of the GBLA.

Do you maintain documentation of data flows and data inventories for client scoped data?

This practice aligns with data governance, security, and privacy standards QR Planet adheres to, especially when handling sensitive or classified client data.

Do you have a Privacy Policy regulating the protection of information handled on behalf of clients?

The protection of all information collected, transmitted, processed, disclosed, or maintained by QR Planet on behalf of clients is ensured.

Do you have a documented Records Retention Policy that ensures Personal Information to be retained for no longer than necessary?

QR Planet is fully GDPR complient and uses a records retention policy that doesn't allow for Personal Information to be retained longer than necessary.