SeaRoc Group will be releasing a number of new features to its Personnel Management System ahead of the new General Data Protection Regulations (GDPR) coming into effect on 25 May 2018. 

The recent Facebook data breach puts further emphasis on ensuring people’s personal data is protected, and companies who store personal information are enforcing the appropriate security measures.   

The system provides integrated personnel and operational planning tools, enabling a controlled, compliant and auditable method for managing large-scale operations – including inductions, personnel, certificates, access levels, Risk Assessments/Method Statements (RAMS) and work permits.

The company is developing tools that will allow the system to anonymise Personal Identifiable Information (PII – data that could potentially identify a specific individual) from data stored within the system.    

Roy Dempster, SeaRoc Group’s technical manager, commented: “In a data-driven business such as ours, GDPR will place further responsibility on us as a data processor. Following extensive analysis of our policies, procedures and solutions, we will be launching a number of tools to ensure full compliance with the new standards and give confidence to our clients in the security of their data held within the system”.

New Security Features of the Personnel Management System will include:

  • Changes in the way log and audit data are stored, in order to protect a data subject’s right to be forgotten.
  • The anonymisation process will remove PII from client data on request, thereby allowing clients to analyse historic data without infringing the data subject’s rights.
  • Compliance measures will allow clients to be provided with vital support for handling data subject access requests.

SeaRoc Group considers client data protection to be of critical importance and are setting the highest standards of data protection that represents a fundamental best–practice for all of clients and users of its software.

The EU General Data Protection Regulation (GDPR) replaces the Data Protection Directive 95/46/EC was designed to harmonise data privacy laws across Europe, to protect and empower all EU residents’ data privacy and to reshape the way organizations across the region approach data privacy.