Enterprise Security Assessment > Data and Asset Security > Asset and Information Management

Is there a procedure for information handling consistent with its classification?

book reader icon
1 Minute
11/14/2024
facebook logo gray
linkedin logo gray
mail logo gray

Yes. QR Planet is fully GDPR complient. All information is stored, processed and communicated consistent with its classification and in accordance to all regulatory measures and compliance requirements; This is especially the case for Personal Information (also see our Privacy Policy).

This procedure has been approved and is monitored by management and is being communicated to all appropriate Constituents. Management and consultants maintain the procedure and review it regularly to keep it up to current standards.

Last update 3 days ago

Does QR Planet handle any client scoped data that can be classified as personal information or data of individuals?

The handling of client scoped data that includes any such classification happens in full compliance with the GDPR. This is reviewed by Data Protection Officers.

Is client scoped data handled that can be classfied as personally identifiable financial information under the Gramm-Leach-Bliley Act (GBLA)?

No, as QR Planet renders no financial services, especially such requiring us to fall under the rules of the GBLA.

Is documentation of data flows and data inventories maintained for client scoped data based on data or information classification?

This practice aligns with data governance, security, and privacy standards QR Planet adheres to, especially when handling sensitive or classified client data.

Is there a documented Privacy Policy regulating the protection of information handled on behalf of clients?

The protection of all information collected, transmitted, processed, disclosed, or maintained by QR Planet on behalf of clients is ensured.

Is there a documented Records Retention Policy that ensures Personal Information to be retained for no longer than necessary?

QR Planet is fully GDPR complient and uses a records retention policy that doesn't allow for Personal Information to be retained longer than necessary.