Online Technology for Research & Insight

Press Release 25 May 2018

Demographix releases GDPR compliance toolset

LONDON UK: As the UK's leading developer of online research tools, Demographix has once again put itself well ahead of its competition by releasing a GDPR-compliance toolset. These tools will help its customers fulfil their obligations under the new GDPR regulation that came into effect on 25 May 2018.

The General Data Protection Regulation will allow individuals to ask what personal data is held on them by companies/organisations, give them the right to request their personal data be deleted, and ensure active consent is agreed when gathering personal data.

"For the past year we have been developing tools that make it easier to search your account and locate personal data that has been gathered in surveys or used in our panel management system," said Bobby Pickering, Demographix's Data Protection Director. "Our customers can then ensure that personal data is deleted from surveys after use, and enforce their obligations under the right to be forgotten."

He added: "We are advising customers that the personal data they gather or use in our systems is their responsibility under GDPR regulations, but we will make it a lot easier for them to manage their necessary data duties than other survey suppliers can offer."

The Main Features of the new GDPR tools

  • Personal Identification Data (PID) Designation: When scripting surveys, customers will now be alerted on insertion of any write-in/open ended question, as to whether it is gathering PID. If they designate a question as PID, they will then be alerted to the need for adding an active consent tick-box statement of intent. PID-designated questions will also now enable batch deletion of data gathered in them after data collection has stopped and the analysis stage is completed. A PID search tool will allow customers to interrogate all their surveys for write-ins that may hold personal data and designate these as PID for easier data deletion.
  • Procedures for Wiping Data: Data deletion will be strictly enforced by Demographix. For write-in answers in survey responses that have been labelled as PID, the data is "redacted". This means that, when viewing or analysing survey responses, there is an indication that something had been entered by the respondent as the answer given is replaced with the word "REDACTED" for text answers and "-1" for numeric data. Other types of data, such as IP addresses and panel member IDs stored as metadata for a survey response, will be deleted and not replaced with anything. Both these processes will be irreversible.
  • Right To Erasure Requests: Also known as the "Right to be Forgotten", any "Right to Erasure" requests that customers receive will be complemented by our tools. These will ensure that data deleted on their systems can be located on ours, and any action they take can be mirrored on our systems to ensure full compliance. We will provide tools to allow for individual search, easy batch deletion, and proof-of-deletion – the latter using highly secure encrypted technology.

Demographix customer data is stored using a dedicated and highly-secure UK-based infrastructure. "Many of our competitors are international operations that move data, wittingly or unwittingly, between countries, and cannot ensure territorial compliance and integrity," said Pickering.

About Demographix: Demographix is the leading UK developer of online research tools, specialising in the publishing, broadcast, health, public, academic and hospitality sectors. The company develops technology compatible with a wide range of browsers and form factors, including tablets and smartphones. Demographix is the registered trademark of Demographix Limited. Demographix is a company partner of the Market Research Society. Company registered in England and Wales No. 4358487. Registered with the ICO No. Z1244335.