CIFAS - For Organisations

If you are interested in protecting the identity of your company because you are at an increased risk of (or have already experienced) corporate identity fraud, please refer to the information for individuals and complete the application form, using the details of your company.

Protective Registration For Organisations that have experienced a data breach

CIFAS provides a service to help organisations to protect consumers and employees from identity fraud where there has been a data security breach. When a laptop bearing customer details is stolen, or payroll or other information is intercepted, for example, a straightforward solution is available from CIFAS.

The service is known as the CIFAS Bulk Protective Registration Service. It enables organisations to co-ordinate and submit to the CIFAS database, as a batch, the details of all those individuals who require protection. Before doing so, in accordance with the Data Protection Act, the organisation must inform its customers or employees of the data breach and that their personal data is being processed by CIFAS to complete the Protective Registration.

The service allows those who are at risk of identity theft to have a special CIFAS warning 'flag' placed on their credit reference agency file. Then when, for example, an application for credit or insurance is received by a CIFAS Member (such as a bank, building society or insurance company), the Member is alerted by the warning 'flag' of the need to undertake additional verification checks to ascertain that the applicant is genuine, and not a fraudster trying to commit identity theft. All such information is held in the strictest confidence. The information is not used for any other purpose.

Conditions

Certain conditions must be fulfilled before CIFAS can accept and process any data, and companies or organisations must agree in writing to the following procedure.

It is the responsibility of the company or organisation to explain the CIFAS Protective Registration Service to the individuals and set out the advantages and disadvantages of registration. The company or organisation also has to inform the individual that CIFAS is dealing with their personal data for crime prevention and/or detection purposes, and that the registration is taking place.
The organisation submitting the request must notify the individuals of the breach of data security and that their personal data is being processed by CIFAS as part of the Protective Registration, to meet the requirements of the Data Protection Act. This notification is known as the Fair Processing Notice (FPN).

Organisations interested in this Bulk Protective Registration Service should contact the CIFAS Compliance Team.

Individuals seeking CIFAS Protective Registration should read the Protective Registration for Individuals page.

< Click here to return to Protective Registration.

For
Organisations

Professional Website Design by Jarrett & Lam Consulting