The EU General Data Protection Regulation (GDPR) will apply in the UK from 25 May 2018. It is an essential step forward in enhancing the privacy and security of personal data. The GDPR will be regulated and enforced in the UK by the Information Commissioner’s Office (ICO). Financial services firms will need to consider how the GDPR will apply to them, and ensure that they are ready to comply with the regulations from May 2018.
Complying with some of the FCA’s rules requires financial services firms to process personal data. Firms have asked FCA about their ability to comply with both the GDPR and rules made by the FCA. FCA and ICO believe the GDPR does not impose requirements which are incompatible with the rules in the FCA Handbook. Indeed, there are a number of requirements that are common to the GDPR and the financial regulatory regime detailed in the Handbook.
Compliance with GDPR is now a board level responsibility, and firms must be able to produce evidence to demonstrate the steps that they have taken to comply. The requirement to treat customers fairly is also central to both data protection law and the current financial services regulatory framework. When the FCA makes rules, we take into account how our requirements will affect the privacy interests of individuals such as firms’ customers and employees, and are open and transparent on why we have made rules in the way that we have.
The FCA and ICO are working closely together in preparation for the GDPR, and recently jointly hosted a GDPR Roundtable with firms and industry bodies to listen to industry concerns. One example of how FCA and ICO are working together is innovation, where the ICO is providing tailored input to the FCA’s Innovation Hub.
Full news
© FCA - Financial Conduct Authority
Key
Hover over the blue highlighted
text to view the acronym meaning
Hover
over these icons for more information
Comments:
No Comments for this Article