Govern · jurisdiction
United Kingdom
The ICO expects a DPIA for any significant automated decision affecting workers. Three of the six people-affecting decision points have a DPIA on file.
Units governed
483
Stamped on the unit itself
Placements here
10
299,115 records
Inbound routes
0
Records arriving from elsewhere
Outbound routes
3
Records leaving this jurisdiction
Breach notice
72 hr
Supervisor: Information Commissioner's Office
The regime that applies here
Privacy and artificial intelligence obligations, as they stand.
Privacy regime
UK GDPR
UK GDPR and Data Protection Act 2018
Artificial intelligence regime
Principles-based, regulator-led
Regulator guidance — No statute yet. A supervisor has published expectations that carry weight in practice.
Transfer adequacy
Adequacy decision
Default mechanism: UK adequacy for inbound EU data; IDTA or UK Addendum outbound
Supervisory authority
Information Commissioner's Office
Local obligations that change how work is run
These are operating constraints, not footnotes.
Localization rule
No localization mandate. Transfers out require an IDTA or the UK Addendum to the EU clauses.
Employee consultation
No mandatory works council. Consultation duties bite on collective redundancy.
What is stored and processed here
One row per class of record, per role, per system.
| Record class | Role | System | Facility | Volume | Note |
|---|---|---|---|---|---|
| agent-telemetry | Stored | This platform platform-core | AWS eu-west-2, London | 1,530 | |
| candidate-applications | Processed | Recruiting and Applicant Tracking ats | Vendor cloud, Singapore | 19,287 | |
| compensation | Stored | Core HR and Payroll hcm | Vendor cloud, London | 10,513 | |
| customer-contact | Stored | Customer Relationship Management crm | Vendor cloud, London | 124,936 | |
| employee-master | Processed | Core HR and Payroll hcm | Workday EU pod, Amsterdam | 10,513 | |
| health-safety | Stored | Occupational health record store ehs | Vendor cloud, London | 752 | No agent access. |
| performance-records | Processed | Core HR and Payroll hcm | Workday EU pod, Amsterdam | 7,070 | |
| research-payloads | Stored | Research Notebook and Experiment Data eln | On-premise, Cambridge England | 2,807 | Asserted from the site register. No feed. |
| supplier-bank | Stored | Group ERP — Financials erp-fi | AWS eu-west-2, London | 6,147 | |
| support-transcripts | Processed | Contact Center Platform ccaas | Vendor cloud, London | 115,560 |
Inbound — records arriving here
Lawful basis and impact assessment state for each route.
No routes recorded.
Outbound — records leaving here
Lawful basis and impact assessment state for each route.
XFER-003UK→SGCleared
Candidate screening and assessment for UK requisitions at the Singapore hub.
Standard contractual clausesUK Addendum to EU SCCs, executed 2024-11-18Assessment current2,310/mo
XFER-006UK→SGCleared
Out-of-hours contact center handling for UK customers.
Standard contractual clausesUK Addendum to EU SCCs, executed 2023-07-14Assessment current51,300/mo
XFER-012UK→SGCleared
Calibration preparation and review quality checks at the Singapore hub.
Standard contractual clausesUK Addendum to EU SCCs, executed 2024-11-18Assessment current2,140/mo
Which functions run work here
Rolled up from the jurisdiction stamped on individual units.
Finance49
Procurement & Source-to-Pay43
Research & Development41
AI GBS & Global Business Services38
Information Technology37
Customer Service36
Human Resources34
Supply Chain33
Marketing32
Revenue Operations30
Legal29
Engineering28
Sales27
Administration26