Is ASSIST GDPR compliant?

ASSIST is designed to comply with UK GDPR requirements. Compliance with data protection legislation also depends on how the customer configures and uses ASSIST.

The customer remains responsible for matters such as:

Lawful basis
Transparency
Recording notices
Data minimisation
Appropriate use cases
Staff training
Retention of final records
Data subject rights
Appropriate handling of sensitive information

A DPIA should therefore assess both the ASSIST service and the customer's proposed use of it.