1. Information Destruction; 2017 and beyond!

2. About the BSIA
The leading trade association for the professional security industry in the UK.
Established in 1967, celebrating 50 years of representing the security industry.
Our members are responsible for more than 70% of the UK security products and services (by turnover).
The BSIA enjoys strong and productive relationships with Government, police and key legislative and standards setting bodies.
The Association is the industry’s representative voice, which is reflected in the type of companies the BSIA supports.

3. Information Destruction
ID Section was formed in 2001 and had its beginnings founded from NAID UK.
ID Section has lead in the development of BS8470:2006 and EN15713:2009.
Currently chaired by Don Robins, Printwaste.

4. European Data Protection
European legislation on data protection has existed in some form since 1995.
Differences in the way each EU member state implements data protection legislation has led to inconsistencies across the EU which in turn has led to complexities, legal uncertainties and heavy administrative burdens, largely for private businesses.
Reforms are also being introduced to reflect the growing reliance on digital services in people’s day-to-day lives.
The reforms, officially named The European Data Protection Reforms, are comprised of two parts; the General Data Protection Regulation (GDPR) and the Data Protection Directive (DPD).

5. GDPR
The GDPR will come into effect on 25th May 2018 and key changes include:
Heightened Security – for businesses and their data processors.
Larger Fines for non-compliance – Two-tier system.
Internal Processes - Requirements to maintain internal documentation on a business’s processing activities and controls.
Data Protection Officer – Businesses that process large quantities of sensitive personal data or that process personal data that engage in systematic monitoring on a large scale will have to appoint a ‘Data Protection Officer’.
Further Enhancements – Member states will have the ability to enhance specific rules around employee data processing.

6. GDPR - Guidance
The Association is working with its members to prepare data controllers and advise:
Raise awareness with decision makers.
Begin to document what personal data is currently held where it came from and who you share it with.
Review how they seek, obtain and record consent and whether changes are required.
Ensure they have the right procedures in place to detect, report and investigate a personal data breach. The GDPR will bring in a breach notification duty across the board.
Designate a Data Protection Officer and assess where the role will sit within the organisation’s structure.

7. PAS 7010:2016
Secure destruction of sensitive material – Specification.
Scope:
The PAS describes the security requirements of a process for the secure physical destruction of sensitive material – paper, electronic media or other items storing or having stored sensitive information such as medical records, financial records or software source code – in order to ensure that the confidentiality of the stored sensitive information is maintained when the sensitive material is no longer required.

8. PAS 7010:2016
It provides technical requirements for the form of waste output from the destruction process from which it is very unlikely that sensitive information can be recovered. The PAS may be implemented by:
Any entity that generates sensitive information, such as retailers, banks, charities and government agencies;
Any entity that handles sensitive information and/or sensitive material on behalf of another individual or organization, such as storage, hosting or processing service providers;
Providers of all types of secure destruction services.

9. GDPR - Guidance
The Association is working with its members to prepare data controllers and advise:
Raise awareness with decision makers.
Begin to document what personal data is currently held where it came from and who you share it with.
Review how they seek, obtain and record consent and whether changes are required.
Ensure they have the right procedures in place to detect, report and investigate a personal data breach. The GDPR will bring in a breach notification duty across the board.
Designate a Data Protection Officer and assess where the role will sit within the organisation’s structure.

10. GDPR - Guidance
The Association is working with its members to prepare data controllers and advise:
Raise awareness with decision makers.
Begin to document what personal data is currently held where it came from and who you share it with.
Review how they seek, obtain and record consent and whether changes are required.
Ensure they have the right procedures in place to detect, report and investigate a personal data breach. The GDPR will bring in a breach notification duty across the board.
Designate a Data Protection Officer and assess where the role will sit within the organisation’s structure.

11. Special interest
The following sections of membership are open to companies specialising in areas of special interest:
Civil Aviation
Export Council

12. Why use a BSIA member?
Have confidence in selecting the right security provider
knowing that all BSIA members:
Are independently inspected to ISO 9001 (incorporating the relevant industry standards)
Background checks are performed on all senior managers
Are at the forefront of industry best practice often developing Codes of Practice that become industry standards
Are up-to-date on the latest developments in legislation and technology
Provide continued investment in professional training and development

13. Why join the BSIA?
By being part of an organisation that represents like-minded companies, membership offers:
Representation, from the leading trade association for your industry.
The ability to shape the future of your industry by influencing standards.
A rise the profile for your business.
The knowledge to keep abreast of the changes that affect your business.
Real added value benefits through exclusive discounts and services.
A differentiator to be proud of!

14. PAS 7010 : Raise awareness with decision makers.
Begin to document what personal data is currently held where it came from and who you share it with.
Review how they seek, obtain and record consent and whether changes are required.
Ensure they have the right procedures in place to detect, report and investigate a personal data breach. The GDPR will bring in a breach notification duty across the board.
Designate a Data Protection Officer and assess where the role will sit within the organisation’s structure.

15. Joining the BSIA
A member of the BSIA team will be happy to discuss membership with you so speak to us today to find out how the Association can provide you with the tools to provide you with a commercial advantage.
Follow