Today we continue talking about the ARC policy. As you recall, yesterday referred me to a second post on the subject , Which would expose the minimum content of the policy. Let it.
First, ARCO policy should include an introduction explaining why it was drafted and adopted this policy (you know, the fundamental right that we all attend, the commitment of management in the compliance with the Data Protection Act, and blablabla ....).
then, can you outline the objectives of the document (to regulate the manner in which rights will be addressed in the company ARCO and explain to each employee's role in this task) and scope (in principle, an internal standard mandatory for all staff).
We turn now to the development of the policy itself, which contain at least:
- ARCO What rights and what each one.
- id responsible for their care, who must submit any request that is received by the company, and doubts arising over the implementation of the policy (I'm afraid that that person is you.)
- Description of the mechanism for responding to the requests: Deadlines to meet the demands, assumptions for refusal of registration requests, cases of positive attention from the right (for example, if a health center, it could establish a procedure to deliver the record in hand, in a sealed envelope, the patient must sign a receipt, etc. ...).
- Annexes: Models of response to requests (standard letter of denial of cancellation form letter estimating the right of access, etc ...).
goes without saying that if there is a business process model, internal instruction or similar quality standards imposed or otherwise, you should stick to that model. Do not take the exactly the points that I mentioned above. Adapt the style of your organization.
As I commented, this policy should be disclosed, if not entirely, at least in its basics. To do this, you can choose several ways:
- E-mail information aimed at all personnel of the company
- Posters placed in key areas (cafeteria, hallway, rest areas, etc ...) Check them put imagination and not just letters.
- Diptychs or triptychs (even in Word you can get acceptable results)
- specific section in the Manual of Home (if any)
is very important to release the same message with simple words and regularly. Goebbels knew this and now you too: Repeat your camapaña ARCO rights awareness at least once a year, changing the medium (one year placed the sign next to the coffee machine, the next, send an email ...)
Emphasize especially the tight deadlines and they must be sent to you immediately after receiving a letter concerning the exercise of rights (or general PDPA). After all, you are the hero and will not hurt to have more visibility in the company, creating the "false" appearance that is doing something useful to earn his salary.
0 comments:
Post a Comment