Data processing agreements
Where we process personal data on behalf of a client, we act as a processor under a written data processing agreement that meets the requirements of Article 28 of UK GDPR.
Access control
Team members receive individual accounts with access limited to what their role requires, and access is reviewed and removed promptly when no longer needed.
Training and confidentiality
Everyone handling personal data is trained on data protection and confidentiality, including the handling of health data, before starting work.
Supporting NHS requirements
For clients delivering NHS services, we follow their information governance procedures and support the evidence they provide for the Data Security and Protection Toolkit (DSPT).
International transfers
Where personal data is accessed from outside the UK, we use appropriate safeguards such as the UK International Data Transfer Agreement or Addendum, as agreed with the client.
Incidents
Suspected personal data breaches are escalated immediately and reported to the client without undue delay so they can meet their obligations.
Questions? Email info@lytnetwork.com.