[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-detail-242002-en":53,"doc-seo-242002-105":76},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":5,"data":54},{"doc_id":55,"user_id":56,"nickname":57,"user_avatar":58,"doc_module":9,"category_id":35,"category_name":36,"doc_title":59,"doc_description":60,"doc_content":61,"file_id":62,"file_url":63,"file_type":64,"file_size":65,"view_count":66,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":67,"language":68,"language_code":69,"site_id":70,"html_lang":69,"table_of_contents":71,"faqs":72,"seo_title":73,"seo_description":60,"update_tm":74,"read_time":75},242002,7971461741311,"Ophelia","https://ap-avatar.wpscdn.com/avatar/74000253aff267980c6?x-image-process=image/resize,m_fixed,w_180,h_180&k=1779345379180704826","Completed Information Asset Register - Jan 2025 - Data Protection Processing Summary","Completed Information Asset Register (Jan 2025) documents how a service handles personal and special category data across defined activities, including subject access requests, ICO complaints, data protection impact assessments, data breaches, and training/advice. For each activity, it records whether data is collected, volumes stored and transferred, legal bases for processing, and operational controls. It also specifies retention timelines, destruction and review practices, storage locations and access controls, processing descriptions, and responsible teams for handling inquiries and investigations.","| Data Description |  |  |  |  |  |  |  | Legal Reason for Processing |  |  |  |  |  |  |  |  |  |  |  |  | Data Processing |  |  |  |  |  |  |  |  |  |\n| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |\n| Service Area | Activity description | Do you collect Persona\u003Cbr>l Data? | Do you collect Special Catergory Data? | How many peoples data do you store? | How many peoples data do you transfer? | Risk |  | What is your legal reason for processing Personal and Special Catergory Data (Part 1) | What is your legal reason for processing Special Catergory Data (Part 2) | Comments | Risk |  | Obtain\u003Cbr>and reuse | Right tobe forgotten | Restrict Processing | Right to object | Automatic decision Making / profiling | Comments (If\u003Cbr>answered no, comply or explain) | Risk |  | Description of processing | Data Received from | Data sent to | Retention period | Destruction Process | Where stored/Access control | Format | Comments | Accessed by/Shared with | Risk |\n| I\u003Cbr>n f\u003Cbr>o r\u003Cbr>m a\u003Cbr>t i\u003Cbr>o n\u003Cbr>G\u003Cbr>o v\u003Cbr>e r\u003Cbr>n a\u003Cbr>n c\u003Cbr>e | Data ProtectionSubject Access Requests | Yes | Yes | Yes (1001+) | Yes (1-50) | 7 |  | Consent | Explicit Consent |  | 2 |  | Yes | No | Yes | Yes | No | RTBFInfomration will be retained for 3 years following full response issued. Automated Decision Making is not part of this process. | 2 |  | Data Subjects make requests under the Data Protection Act. Officers then collate data from multipe departments within MDC, review the infomration, apply redactions were necessary, and release to the data subjects. | Any/all MDC\u003Cbr>systems and Officers. | First through to the IG team for review, followed by a full response to Data Subject. | 3 Years in line with ICO recommendations | Documents reviewed on an annual basis. Any requests have have been fully responded to will be deleted unless they have been subject to a ICO complaint, in which case the data will be retained for the further 3 years. | MDC Systems:\u003Cbr>Share DriveMeta data pulled throught to case management system Iken. | Electronic |  | IG and Legal Team | \\#\\#\\#\\# |\n|  | ICO Complaints | Yes | Yes | Yes (1-50) | Yes (1-50) | 4 |  | Legal Obligation | Legal Obligation | Data\u003Cbr>Protection\u003Cbr>Act 2018 | 2 |  | Yes | No | No | No | No | RTBFInfomration will be retained for 3 years following full response issued. | 4 |  | Data Subjects are able to make complaints to the ICO regarding how their data is processed. MDC have an obligation to the ICO to investigate and report findings. As well as impliment and recommended changes to improve service standards. | Any/all MDC\u003Cbr>systems and Officers. | First through to the IG team for review, followed by a full response to Data Subject and ICO. | 3 Years in line with ICO recommendations | Documents reviewed on an annual basis. Any requests have have been fully responded to within the last 3 years will be deleted. | MDC Systems:\u003Cbr>Share DriveMeta data pulled throught to case management system Iken. | Electronic |  | IG and Legal Team | \\#\\#\\#\\# |\n|  | Data Protection Impact Assessments | Yes | Yes | Yes (51-100) | Yes (1-50) | 5 |  | Legal Obligation | Legal Obligation | Data\u003Cbr>Protection\u003Cbr>Act 2018 | 2 |  | Yes | Yes | Yes | Yes | No | No automated decision making for this process | 1 |  | MDC Officers, upon starting a new project, have a requirement to compete a DPIA form to proivde assurance that data is being managed appropirately. May contain special catergory data in some instances. | MDC Officers\u003Cbr>and third party service providers. | IG Team | 6 Years as per ICO best practice | Documents reviewed on an annual basis. Any requests have have been fully responded to 6 years ago will be deleted. | MDC Systems:\u003Cbr>Share DriveMeta data pulled throught to case management system Iken. | Electronic |  | IG and Legal Team | \\#\\#\\#\\# |\n|  | Data Breaches | Yes | Yes | Yes (51-1","cbCaiePRTVMzMf7u","https://ap.wps.com/l/cbCaiePRTVMzMf7u","pdf",1089883,9,19,"English","en",105,"# Data Processing Overview\n## Service Areas and Activities\n### Legal Reasons for Processing\n## Risk, Retention, and Access Control","[{\"question\":\"What legal reasons are recorded for processing personal and special category data?\",\"answer\":\"The register records legal reasons per activity, including consent, explicit consent, and legal obligation under the Data Protection Act 2018 for items such as ICO complaints and impact assessments.\"},{\"question\":\"How long is information retained after requests or responses are completed?\",\"answer\":\"Retention is specified per activity, commonly aligned to three years following full response for subject access and complaints, and six years for items such as DPIAs and certain breach-related documentation, following stated ICO best-practice or limitations.\"},{\"question\":\"Who processes the data and how is access control handled?\",\"answer\":\"Processing and responses are routed through the IG team for review and then to the appropriate stakeholders (including legal and IG as stated). Data is stored in MDC systems such as share drives and connected case management tooling, with electronic formats and controlled access.\"}]","Completed Information Asset Register - Jan 2025 - Data Protection Processing Summary | PDF",1789184442,7,{"code":4,"msg":77,"data":78},"ok",{"site_id":70,"language":69,"slug":79,"title":59,"keywords":80,"description":60,"schema_data":81,"social_meta":137,"head_meta":139,"extra_data":141,"updated_unix":142},"completed-information-asset-register-jan-2025-data-protection-processing-summary","",{"@graph":82,"@context":136},[83,99,119],{"@type":84,"itemListElement":85},"BreadcrumbList",[86,90,93,96],{"item":87,"name":88,"@type":89,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":91,"name":10,"@type":89,"position":92},"https://docshare.wps.com/template/",2,{"item":94,"name":36,"@type":89,"position":95},"https://docshare.wps.com/template/forms/",3,{"item":97,"name":59,"@type":89,"position":98},"https://docshare.wps.com/template/completed-information-asset-register-jan-2025-data-protection-processing-summary/242002/",4,{"url":97,"name":59,"@type":100,"image":101,"author":106,"headline":59,"publisher":108,"fileFormat":111,"inLanguage":69,"description":60,"dateModified":112,"datePublished":113,"encodingFormat":111,"isAccessibleForFree":114,"interactionStatistic":115},"DigitalDocument",{"url":102,"@type":103,"width":104,"height":105},"https://docshare.wps.com/thumbnails/completed-information-asset-register-jan-2025-data-protection-processing-summary/242002.png","ImageObject",442,249,{"name":57,"@type":107},"Person",{"url":87,"name":109,"@type":110},"DocShare","Organization","application/pdf","2026-10-10","2026-09-12",true,{"@type":116,"interactionType":117,"userInteractionCount":92},"InteractionCounter",{"@type":118},"ViewAction",{"@type":120,"mainEntity":121},"FAQPage",[122,128,132],{"name":123,"@type":124,"acceptedAnswer":125},"What legal reasons are recorded for processing personal and special category data?","Question",{"text":126,"@type":127},"The register records legal reasons per activity, including consent, explicit consent, and legal obligation under the Data Protection Act 2018 for items such as ICO complaints and impact assessments.","Answer",{"name":129,"@type":124,"acceptedAnswer":130},"How long is information retained after requests or responses are completed?",{"text":131,"@type":127},"Retention is specified per activity, commonly aligned to three years following full response for subject access and complaints, and six years for items such as DPIAs and certain breach-related documentation, following stated ICO best-practice or limitations.",{"name":133,"@type":124,"acceptedAnswer":134},"Who processes the data and how is access control handled?",{"text":135,"@type":127},"Processing and responses are routed through the IG team for review and then to the appropriate stakeholders (including legal and IG as stated). Data is stored in MDC systems such as share drives and connected case management tooling, with electronic formats and controlled access.","https://schema.org",{"og:url":97,"og:type":138,"og:title":59,"og:site_name":109,"og:description":60},"article",{"robots":140,"canonical":97},"index,follow",{"doc_id":55,"site_id":70},1791662588]