Data Protection & GDPR

Data Protection & GDPR Compliance

HMCTS LLC is committed to protecting the personal data of all individuals whose information we process. We comply with the General Data Protection Regulation (GDPR) and all applicable data protection laws.

1. Our Data Protection Commitment

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including inter alia as appropriate: the pseudonymization and encryption of personal data, the ability to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services.

2. Your Rights Under GDPR

Under GDPR, you have the following rights:

• Right of Access: You have the right to obtain confirmation as to whether or not personal data concerning you is being processed
• Right to Rectification: You have the right to obtain rectification of inaccurate personal data
• Right to Erasure: You have the right to obtain erasure of personal data, under certain conditions
• Right to Restrict Processing: You have the right to obtain restriction of processing
• Right to Data Portability: You have the right to receive personal data in a structured, commonly used and machine-readable format
• Right to Object: You have the right to object to processing of personal data
• Rights Related to Automated Decision Making: You have the right not to be subject to a decision based solely on automated processing

3. Legal Basis for Processing

We only process personal data on one or more of the following legal bases:

• Consent from the data subject
• Performance of a contract to which the data subject is party
• Compliance with a legal obligation
• Protection of vital interests
• Performance of a task carried out in the public interest or in the exercise of official authority
• Legitimate interests pursued by the controller or by a third party

4. Data Transfers

Where we transfer personal data internationally, we implement appropriate safeguards, including standard contractual clauses, adequacy decisions, or binding corporate rules.

5. Data Breach Notification

In the event of a data breach, we will notify affected individuals and relevant authorities without undue delay, as required by applicable law.

6. Exercising Your Rights

To exercise any of your rights under GDPR or data protection laws, please contact us using the information below. We will respond to your request within 30 days.

7. Data Protection Officer

If you have questions about our data protection practices or wish to submit a formal complaint, you may also contact your local data protection authority.

8. Contact Us

For any questions about our data protection practices: