1. General Principles

 

1.1 We are committed to protecting the privacy and security of your personal information in accordance with the General Data Protection Regulation (GDPR).

1.2 In the course of its activities Wilson’s Veterinary Practice will collect, store and process personal data, including the recording of telephone calls, and it recognises that the correct and lawful treatment of this data will maintain confidence in the organisation and will provide for successful business operations.

 

 

 

2. Purposes of Call Recording

 

2.1 The purpose of call recording is to provide an exact record of the call which can:

a. Help identify staff training needs.

b. Help improve staff performance.

c. Help protect staff from abusive or nuisance calls.

d. Establish the facts in the event of a complaint either by a client, or a member of staff and so assist in resolving it.

e. A call recording may be used in evidence to assist with legal enquiries or investigations.

f. A call recording may also be used as evidence in the event that an employee’s telephone conduct is deemed unacceptable. In this situation the recording will be made available to the business manager and Data Protection Office, to be investigated as per the Practice Disciplinary Policy.

2.2 The telephone call recording system will record both incoming & outgoing telephone calls and recordings may be used to investigate compliance with Wilson’s Veterinary Practice’s call quality standards, to provide further training, to support the investigation of complaints, to ensure that Wilson’s Veterinary Practice complies with regulatory procedures and to provide evidence for any regulatory investigation.

2.3 Wilson’s Veterinary Practice will record telephone conversations from its hosted telephone system only.

 

 

 

3. Communicating the Call Recording System

3.1 Wilson’s Veterinary Practice will make every reasonable effort to communicate those calls will be recorded. This will be done by:

a. Publishing this policy on the practices’ website,

b. General notification e-mail to all staff to inform them that telephone calls will be recorded for training and monitoring purposes.

c. Reference to this policy within the new-employees induction pack.

d. Informing all clients in the first instance via.

 

 

 

4. Procedures to prevent the recording of sensitive data 

1. The purpose of this section is to advise all staff at Wilson’s Veterinary Practice of our position on taking credit card details from clients and how to keep those details safe & secure. It is our responsibility to protect credit card data.

2. Our credit card provider requires us to comply with their Payment Card Industry Data Security Standards (PCI DSS) compliance programme. The programme aims to ensure that all merchants accepting card payments do so securely.

3. A data breach can make us liable for any fines incurred by Card schemes in addition to the cost of remedying the breach plus any compensation payable. Wilson’s Veterinary Practice will make every reasonable effort to ensure PCI DSS compliance is upheld regarding the recording of such telephony stored data.

   1. Credit Card information should only be taken from the client either in person or over the phone. For compliance purposes, clients wishing to make payment via credit card over the phone will not have their call recorded, or it will be deleted immediately.

   2. Card details should not be accepted by e-mail or other insecure messaging technologies.

   3. No member of staff is permitted to write down or retain card information under any circumstance.

 

 

 

5. Procedures for managing and releasing call recordings

 

5.1The recordings shall be stored securely, with access to the recordings controlled and managed by the Company Directors and Data Protection Officer.

5.2 Access to the recordings is only allowed to satisfy a clearly defined business need and reasons for requesting access must be formally authorised only by senior management. All requests for call recordings should include the following:

a. The valid reason for the request.

b. Date and time of the call if known

c. Telephone extension used to make/receive the call.

d. External number involved if known.

e. Where possible, the names of all parties to the telephone call.

f. Any other information on the nature of the call.

5.3. The browsing of recordings for no valid reason is not permitted.

5.4. The Data Protection Act allows persons access to information that we hold about them. This includes recorded telephone calls. Therefore, the recordings will be stored in such a way to enable the Data Protection Officer to retrieve information relating to one or more individuals as easily as possible.

5.5 . Requests for copies of telephone conversations made as Subject Access Requests under the Data Protection Act must be notified in writing to the Data Protection Officer immediately and, subject to assessment, he/she will request the call recording and arrange for the individual concerned to have access to hear the recording.

5.6.  In the case of a formal request from an external body in connection with the detection or prevention of crime (e.g. the Police), the request should be forwarded to the Data Protection Officer who will complete the request for a call recording.

5.7. Requests for copies of telephone conversations as part of staff disciplinary processes will only be released with the written agreement of the DPO, or any other person authorised by the DPO, who will consult with the Data Protection Officer before approval is granted.

5.8. If you do not wish your call to be recorded, please inform a member of staff when they answer your call and they will transfer you to an unrecorded line.

5.9. Recordings of calls will be stored electronically in a secure environment. Call recordings will be automatically deleted, within 30 days.