INSITE has been certified according to the new EU General Data Protection Regulation (GDPR). Implementation of the European Union's GDPR made it necessary to review the changes to the regulations. The audit was conducted in October 2018, with INSITE receiving a pass. This means that INSITE not only satisfies all relevant data protection requirements, but also continuously updates its data protection and data security processes.
We review all data protection and data security aspects of our work every year, by partnering with renowned certification firm DQS GmbH to conduct a formalised audit. By doing this, we can ensure that we provide the best possible protection for the personal data we store on our clients. We don't want to just fulfil the legal requirements, we want to live up to the high security standards we set for our day-to-day operations and to lead by example when it comes to handling the sensitive data entrusted to us.
Data protection and IT security audits are a "must-have" for any EAP. Personal data has to be actively protected against unauthorised use, unauthorised processing or misuse. That's why we conduct regular, consistent audits of our internal processes to check for data security risks, making considerable effort to eliminate them. All our employees are provided with regular training in data protection.