Data
Protection

What our Data Protection policy will cover:

1. Data Security Measures

• End-to-end encryption for all payroll data
• Secure data centers with SOC 2 compliance
• Multi-factor authentication and access controls
• Regular security audits and penetration testing

2. Jamaican Data Protection Act Compliance

• Lawful basis for processing personal data
• Data subject rights and how to exercise them
• Data retention policies and deletion procedures
• Cross-border data transfer safeguards

3. Employee Data Protection

• Payroll data processing and storage
• Employee consent and data minimization
• Right to access, rectify, and delete personal data
• Data portability and withdrawal of consent

4. AI Data Processing (Ellie)

• How Ellie processes and learns from data
• Anonymization and pseudonymization techniques
• AI training data sources and validation
• Automated decision-making safeguards

5. Security Incident Response

• Data breach notification procedures
• Incident response timeline and protocols
• Customer notification requirements
• Regulatory reporting obligations

6. Third-Party Integrations

• Partner security requirements and vetting
• Data sharing agreements and limitations
• Third-party access controls and monitoring
• Vendor risk assessment procedures