Leading supplier of billing and provisioning solutions, Union Street Technologies, has confirmed its compliance with GDPR. As part of its GDPR preparation, Union Street conducted a complete review of its working practices and implemented a number of operational changes accordingly. It also amended its Standard Terms and Conditions to take into account new requirements of the Information Commissioner’s Office (ICO) in relation to GDPR.
The company conducted extensive Privacy Impact Assessments (PIAs) to audit its data stores and ensure there is a lawful reason for holding all data. The types of data processed by Union Street primarily include telephone numbers, address details, account details, partners’ customers’ details and payment details. Following these PIAs, Union Street introduced new procedures to deal with all types of personal data requests and to ensure data is retained only for as long as necessary.
Union Street confirmed that as an ISO/IEC 27001 certified company, it operates in accordance with the principle of least privilege. Access to information is restricted and allowed only to appropriately trained staff that require it as part of their job role. Union Street staff that process Personally Identifiable Information (PII) as part of their role, have signed confidentiality agreements and received training relating specifically to GDPR and data security.
In addition to operational changes, Union Street has made a series of security and privacy enhancements to its aBILLity™ billing software and other solutions that will assist its partners in their compliance with GDPR. Partners using legacy/discontinued product lines have been contacted and offered an upgrade path that will help them to comply with GDPR.
Managing Director, Tony Cook, commented:
