Our approach to GDPR

For some time leading up to the GDPR implementation date of 25th May 2018 we have been reviewing and updating our internal procedures in relation to data held across the firm.

Pierce continues to conduct its business having due regard to the requirements of its professional body, the ICAEW, in terms of ethics and confidentiality in addition to the legal requirements of the relevant Data Protection legislation.

In summary we have:

• Conducted a comprehensive review of the data we hold and the reasons for holding such data and where we no longer have a legitimate reason for holding such data we have arranged for this to be confidentially destroyed.
• Internally all departments have identified the data held and required to be held and considered the security of and access to such data in accordance with the principles of GDPR and our policies, procedures and controls have been changed as necessary to give effect to the adoption of the principles of GDPR.
• The firm has produced a GDPR Manual and published this on its Intranet enabling all personnel holding, handling or processing data to readily have access to the firm’s guidance.
• We have engaged with third party suppliers seeking formal written confirmation that they fully understand and have implemented all measures they deem necessary under the GDPR principles in relation to the data held by them on behalf of this firm.
• We have updated our Privacy Notices and Standard Terms of Business. 
• Personnel have been updated during the GDPR implementation and update processes and training will be made available to those who require clarification beyond the details in the firm’s GDPR manual.
• Whilst there is no requirement to do so the firm has appointed a Data Protection Officer, Jimmy King, to whom queries can be addressed in the first instance.

If you have any further specific queries, please address them with us.