For Organisations
Protective Registration For Organisations (Data Security Breaches)
If you are interested in protecting the identity of your company, please refer to the information for individuals and complete the application form, using the details of your company.
CIFAS offers a service to help organisations to protect consumers and employees from identity fraud where there has been a data security breach. For example: when a laptop bearing customer details is stolen, or payroll or other information is intercepted, a straightforward solution is available from CIFAS.
The service is known as the Bulk Protective Registration Service. It enables organisations to co-ordinate and submit to the CIFAS database the details of all those individuals who require protection as a batch. Before doing so, in accordance with the Data Protection Act, the organisation must inform its customers or employees of the data breach and that their personal data is being processed by CIFAS to complete the Protective Registration.
The service allows those who are at risk of identity theft to have a special CIFAS warning 'flag' placed on their credit reference agency file. Then when, for example, an application for credit or insurance is received by a CIFAS Member (such as a bank, building society or insurance company), the Member is alerted by the warning 'flag' to undertake additional verification checks to ascertain that the applicant is genuine, and not a fraudster trying to commit identity theft. This information is held in the strictest confidence. The information is not used for any other purpose.
Conditions
Certain conditions must be fulfilled before CIFAS can accept and process any data, and companies or organisations must agree in writing to the following procedures.
-
It is the responsibility of the company or organisation to explain the CIFAS Protective Registration Service to the individuals and set out the advantages and disadvantages of registration. The company or organisation also has to inform the individual that CIFAS is dealing with their personal data for crime prevention and/or detection purposes, and that the registration is taking place.
-
The organisation submitting the request must notify the individuals of the breach of data security and that their personal data is being processed by CIFAS as part of the Protective Registration, to meet the requirements of the Data Protection Act.This notification is known as the Fair Processing Notice (FPN).
Organisations interested in this Bulk Protective Registration Service should contact compliance@cifas.org.uk
Individuals seeking CIFAS Protective Registration should read the Protective Registration for Individuals page by clicking here