Safeguards Implemented

• Pseudonymisation: Identification of an individual is not possible without additional information which is kept separately.
• Data Minimisation: All unnecessary personal data is removed before processing to ensure only essential data is handled.
• Encryption: Data is converted into an unrecognizable form to ensure confidentiality and integrity.
• Access Controls: Role-based access controls ensure only authorized personnel have access to personal data.
• Data Masking: Sensitive data is masked during processing to prevent unauthorized access.
• Regular Audits: Audits are conducted regularly to ensure compliance with data protection policies and identify areas for improvement.
• Employee Training: Regular training sessions are conducted for employees on data protection best practices and policies.
• No Data Transferred: In cases where no personal data is transferred, procedures are documented and acknowledged.

Agreements with Staff and Subcontractors

Agreements include:

• Data Privacy Responsibilities
• Confidentiality Responsibilities
• Details of Disciplinary Procedures

This comprehensive approach ensures that all parties involved in data processing activities are fully aware of their responsibilities and the safeguards in place, thereby promoting a culture of data protection and compliance within MField MEA.