The Data Protection Officer will review this appropriate policy document annually or sooner should there be a change in legislation or subject of case law to ensure that is remains current and relevant.
Previous versions of this document will be retained for at least six months after the specified processing of sensitive personal data referred to in that document have ceased.
The Data Protection Officer is responsible for ensuring previous versions of this document are made available on request and for ensuring this document is reviewed and updated when necessary.
