The General Data Protection Regulation (or GDPR) “big bang” has happened and the new regime is in place. Armed with its new powers, the Information Commissioner’s Office continues to take a keen interest in ensuring that organisations are abiding with the new rules. Accordingly, CEMEX continues to develop a strong and effective framework to comply with its responsibilities under GDPR and the Data Protection Act 2018 which is the related domestic UK legislation.
The UK Legal Team has been working with colleagues across the CEMEX community before and after the 25th May deadline to ensure our continued compliance with the new laws. There is now an even bigger emphasis on the protection and security of personal data and any breaches need to be reported to the Information Commissioner’s Office. To build on the security of our information systems, we are also working towards ISO27001 Certification which emphasises our commitment to ensuring any data held by CEMEX is as secure as possible.
As you will be aware, individuals now have a number of new and enhanced rights including requesting access to data we hold, a right to change or erase data in certain circumstances and a right to withdraw consent in certain circumstances. It is important that you tell us immediately of any request you receive regarding the new laws. We have a dedicated email address where you can send any data protection related queries or requests to: dataprotectionuk@cemex.com
It is also important that you tell us of any new technology in the pipeline that is being developed in the UK that involves the processing of personal data as we will need to carry out a data privacy impact assessment to ensure compliance.
We are all responsible for compliance with GDPR and the failure to ensure compliance with the new laws could result in large fines and negative publicity for CEMEX so please ensure you read and are familiar with the global ‘Data Protection and Privacy Policy’ which is available on Shift.
Remember – any correspondence, queries, complaints or questions you receive on GDPR or the Data Protection Act 2018 should be forwarded to the UK Data Protection Team at: dataprotectionuk@cemex.com