RSM firm: Ireland
RSM contact: Terry McAdam
Bringing RSM’s ideas and insight – the work we carried out
RSM Ireland undertook a Privacy Impact Assessment with regard to the current Loan Application process as operated by the Credit Union.
The review assessed the incumbent process in light of both the prevailing Data Protection legislation and the pending General Data Protection Regulation.
Our team mapped the relevant data flows after conducting walk-through testing of the existing process. The nature of the data managed within the present process was also captured.
We prepared a concise report detailing the issues which presented, their implications and our considered recommendations to mitigate the risk associated with matters identified. Following feedback from management, we presented our report to a Board Committee.
Understanding our client – the benefits
The Board and Executive both gained an increased understanding of their data protection obligations (current and future) and their respective roles in ensuring compliance is achieved and maintained.
With respect to the in-scope process, the organisation was presented with clear recommendations which would address the shortcomings identified during our fieldwork. In conjunction with management, a time-bound action plan was agreed to address the risk of an individual’s privacy being impacted during the operation of the Loan Application process.
Read all our GDPR case studies