The GRC Solutions account manager led a project in which our consultant reviewed Canfield’s systems and interviewed key corporate stakeholders, identifying risk associated with certain data processing activities. Some risk was associated with Canfield’s collection and storage of sensitive health information, including biometric imagery.
Canfield subsequently revised its existing business practices to enhance compliance with the GDPR and embolden data subjects’ control over their data.
Contracts with existing service providers now include strengthened data protection clauses, and customer-facing services have revised consent collection forms to properly collect customer health information. The already strong network architecture and encryption policy was further enhanced to give end-to-end protection over data subjects’ privacy when using Canfield tools and technology in the field.
Canfield reported that the analysis was extremely helpful in identifying weak points in its processes, giving it a clear path to GDPR compliance. Following the audit, it implemented the specific measures necessary to achieve a higher level of compliance with the GDPR.
Canfield’s revised policies and agreements give clients greater assurance regarding the protection of their data and further enhance Canfield’s competitive advantage. Canfield believes this has improved its standing in the market as it continues to offer best-in-class service to its clients.
