GDPR Frameworks

GDPR was introduced in May 2019 and affects every business in the UK. Platinum Enterprise’s GDPR Frameworks ensure companies work within their own data protection rules.

What does this mean for a company using a Platinum Enterprise solution? As part of your scoping requirements our software technician can organise a meeting to discuss your company’s GDPR policy with your data controller should you require it. This meeting will cover 3 main areas:

1. How Platinum Enterprise handles your company data, which may impact on our support levels.
2. What personal data is stored within the Platinum Enterprise application. Removing any personal information fields that do not need to be recorded, ensuring that they are invisible.
3. How long certain information needs to be kept by the company for people classed as employed or as a leaver.

We will then create a series of GDPR housekeeping scripts that will ensure these rules are upheld.

1. If Platinum Enterprise is not being used as the primary HR system do not allow address information to be recorded.
2. If Platinum Enterprise is not being used as the primary HR system do not allow National Insurance data to be recorded.
3. When an employee leaves the company, remove their biometric data within 24 hours.
4. When an employee leaves the company, remove all records of their future holidays and medical appointments within 24 hours.
5. When an employee leaves the company, delete all passwords to the Platinum Enterprise app’, the TWC and the ESS within 24 hours.
6. When an employee has left the company and after the statutory period, remove all attendance and absence information and personal data.

NOTE

Please note that Platinum Enterprise will never delete any personal data. We think it is much safer and compliant that our software operates within your data controller’s policies and highlights data that requires deletion. This will always be completed by your data controller and would be a fully audited process.