In the course of its daily organisational activities, Medpoint acquires, processes and stores personal data in relation to: • Employees of Medpoint • Customers of Medpoint • Third party service providers engaged by Medpoint • Consumers engaging with Medpoint Apps In accordance with the Irish Data Protection legislation, this data must be acquired and managed fairly. Not all staff members will be expected to be experts in Data Protection legislation. However, Medpoint is committed to ensuring that its staff have sufficient awareness of the legislation in order to be able to anticipate and identify a Data Protection issue, should one arise. In such circumstances, staff must ensure that the Data Protection Officer is informed, and in order that appropriate corrective action is taken. Due to the nature of the services provided by Medpoint, there is regular and active exchange of personal data between Medpoint and its Data Subjects. In addition, Medpoint exchanges personal data with Data Processors on the Data Subjects’ behalf. This is consistent with Medpoint’s obligations under the terms of its contract with its Data Processors. This policy provides the guidelines for this exchange of information, as well as the procedure to follow in the event that a Medpoint staff member is unsure whether such data can be disclosed. In general terms, the staff member should consult with the Data Protection Officer to seek clarification.