Real-Estate GDPR Compliance

ClientLocal Business
SkillsGDPR, Compliance

Project Objective

The client provides property and planning services. They work with both corporate and private clients. Based in Douglas IOM, they act for clients throughout IOM.  We at MCL take great pride in our attention to detail when it comes to GDPR’s technical requirements, and we’re very successful in implementing it. MCL has a longstanding relationship with the client.

Challenges

  • The client is responsible for handling personal data in respect of a variety of different categories of people, including buyers and sellers of properties, contractors, and other clients and suppliers. To ensure these information streams are properly managed and administered, the client needs to ensure that its activities comply with GDPR.
  • Similarly, as an employer, the client needs to have an understanding of its rights and obligations in respect of employee personal data

The Solution

The compliance journey started with a consultation between MCL, supported by the appropriate personnel of the client. At this meeting, the various different workstreams of the client were assessed, to identify all of the different categories of personal data being received and processed by the client. The meeting also reviewed the staff employed or contracted by the client, and the position in respect of their personal data.

 

The next phase was to determine what kind of personal data is held by the client, and where it is located on each of its systems. This was achieved through an audit of all systems and processes within the business. The audit identified all relevant data that was being held on these systems, including any personal data that was not being processed according to GDPR requirements.

 

Following that meeting, and a scope of work was agreed between MCL and the client to ascertain what needed to be done to achieve compliance, with manageable and measurable progress points to be ticked off on the route to compliance.

 

MCL then produced a suite of documents to deal with the various GDPR obligations and needs of the client.

 

MCL trained staff on how to use the documents, and procedural obligations, to ensure that the responsible people within the business had the knowledge that they needed.

Business Impact

Increased trust and credibility between the real estate firm and its clients.

 

A better understanding of the data/PII being collected by our client.

 

Protected and enhanced brand reputation.