Compliance with Legal Requirements

---

UNIAPT's compliance with US and UK data protection legislation involves adherence to a range of specific legal requirements and best practices.

---

Compliance with US Data Protection Legislation:

Health Insurance Portability and Accountability Act (HIPAA):

Protected Health Information (PHI): UNIAPT ensures the confidentiality, integrity, and availability of all PHI.

Security Rule: Implements required safeguards to protect e-PHI, including administrative, physical, and technical protections.

California Consumer Privacy Act (CCPA):

Consumer Rights: UNIAPT adheres to consumer rights including the right to know about personal information collected, used, and shared.

Opt-Out Rights: Compliance with consumers' rights to opt out of the sale of their personal information.

Children's Online Privacy Protection Act (COPPA):

Verifiable Parental Consent: Ensuring parental consent for the online collection of information from children under 13.

---

Compliance with UK Data Protection Legislation:

UK Data Protection Act 2018 (DPA 2018):

Lawfulness of Processing: UNIAPT processes personal data lawfully, fairly, and in a transparent manner.

Data Minimization: Ensuring that personal data collected is adequate, relevant, and limited to what is necessary.

General Data Protection Regulation (GDPR) as applied in the UK context:

Rights of Data Subjects: Compliance with data subjects' rights such as the right to access, right to rectification, right to erasure, and right to data portability.

Data Protection Impact Assessments (DPIA): Conducting DPIAs for processing operations that are likely to result in a high risk to the rights and freedoms of individuals.

---

Cross-Border Data Transfers:

• EU-US Privacy Shield Framework (prior to its invalidation): UNIAPT had adhered to the Privacy Shield framework for lawful transfer of EU data to the US.

• Standard Contractual Clauses (SCCs): Post Privacy Shield, UNIAPT relies on SCCs for the legal transfer of personal data from the EU/UK to the US.

---

Regular Audits and Updates:

• UNIAPT conducts regular audits to ensure ongoing compliance with these evolving regulations.

• Policies and practices are updated regularly to align with legislative changes and guidance from regulatory authorities.

---

Training and Awareness:

• Regular training programs for employees to ensure they are aware of their responsibilities under these laws.

• Dedicated Data Protection Officers (DPOs) oversee compliance in both the US and UK jurisdictions.

---