IAF Logo
Our Blog

Q34. What are the data protection arrangements?

03 Nov 2021

One of the most pressing issues that has thwarted the upload of certification data by CBs has been concerns over data ownership, privacy, data management, and liability. The DMC has already implemented several changes to address these including precluding the upload of personal data (i.e., IAF CertSearch does not include personal contact details of any certified entities). IAF CertSearch also has continuous user monitoring to regulate certification verifications and to block any attempted data mining activities.
All data uploaded by CBs into IAF CertSearch including details of certified entities data shall remain the property of CBs. Therefore, IAF Database LLC has stipulated the highest level of data security that is commercially viable, and QualityTrade is required to secure cyber security insurance with primacy to IAF Database LLC in the event of any claims.