Purpose, Objectives & Scope
Trinity Rawdon recognises that information is an asset which has a value and in some cases its disposal must be protected. Information classification means categorising information based on its sensitivity and value. This is determined by the adverse impact on individuals and Trinity Rawdon if that information were to be accessed, disclosed, altered or destroyed without authorisation.
Trinity Rawdon has a Retention Schedule and has an Information Classification and Handling Policy and Procedure for determining its risk level. The Retention schedule, the Information Classification and Handling Policy and any classification label on documentation should be used in conjunction with this Policy. The purpose of this document is to direct secure disposal methods.
This policy applies to all Trinity Rawdon information and assets in all its forms.
RISKS & ISSUES
Trinity Rawdon recognises that without proper disposal methods there is a risk that information may suffer accidental or intentional unauthorised access or disclosure. Loss or disclosure of certain information could have a significant effect on the reputation of Trinity Rawdon or individuals and may result in financial loss.
INFORMATION DISPOSAL & DESTRUCTION
Trinity Rawdon classifies and labels information directly related to its value and sensitivity and the legal requirements.
There are 3 classifications that can be applied to Trinity Rawdon information:
When sending information to third parties there needs to be explicitly agreed disposal procedures, and evidence that the third party is complying with these security requirements.
In principal all required Trinity Documents should be held in an agreed central repository which
may be physical or electronic, e,g, on the Website.
When leaving a role individuals should:
• ensure any information they hold is held in a central location
• hand over all relevant information or access details relating to this role to their successor
• dispose of any surplus or duplicate information they are personally storing. E.g. On personal
Trinity holds a retention schedule as part of its Privacy Notice. Before disposing of any information the schedule should be checked to ensure that the correct controls are being applied.
Any information disposal which is not included in the schedule should be discussed with the Leadership Team and an appropriate schedule agreed. The schedule should be updated accordingly.
Any disposal must be in line with the Retention Schedule.
Whilst there is no specific requirement for disposal of ‘public’ documents or information it is recommended that old or outdated information is regularly reviewed and removed or updated to ensure accuracy.
RESTRICTED DISPOSAL AND DESTRUCTION
Physical copies should be destroyed securely e.g. by shredding. Secure destruction of electronic media is recommended for large volumes of data. All legal requirement must be fully complied with e.g. Data Protection Act or The General Data
Protection Regulations.(GDPR). Physical devices such as phones, computers, printer memory cards should be securely wiped or destroyed.
CONFIDENTIAL DISPOSAL AND DESTRUCTION
Physical copies must be destroyed securely e.g. by shredding, burning. Secure destruction of electronic media is recommended for large volumes of data. All legal requirement must be fully complied with e.g. GDPR. Physical electronic devices such as phones, computers, printer memory cards must be securely wiped or destroyed.
Roles & Responsibilities
Anyone holding or storing Trinity Rawdon information is responsible for ensuring adequate disposal methods.
Adherence & Responsibilities
This document will be reviewed and updated as appropriate to changes to the risk environment relating to information security. Changes will be made available.
If you suspect that security or access to your information has been compromised or any of this policy’s requirements have been breached by you or other users, please report it to the Minister or a member of the Leadership Team.
Approval and Version Control
Status: Approved 14.06.18
By: Trinity Rawdon Leadership Team
P Lambert Trinity Rawdon Administrator
Version Review Date: 19/06/2023