The UK Financial Conduct Authority and Prudential Regulation Authority are currently examining means of bolstering diversity and inclusivity (D&I) in the financial sector. Central to these discussions are the challenges posed by data protection considerations. Businesses will have to navigate their data protection obligations delicately, particularly when confronting the D&I data collection, reporting and disclosure mandates laid out in the regulators’ proposals. This exploration comes directly from Allen & Overy LLP’s latest blog post.
These regulatory bodies’ recent suggestions aim at addressing key issues within the market and encourage higher standards of D&I within companies. As per the propositions, firms will be necessitated to collect, report, and disclose certain D&I-related details. This includes data concerning the organizational composition and relevant policies, which may draw significant implications outside the financial sector as well.
Nonetheless, integrating these procedures will not be without difficulties. The need to comply with the current data protection legislation presents particular obstacles to the implementation of these requirements. Firms must thus approach these new requirements with caution and regard for context. Consideration must also be given to the very nature of the personal information requested and the sensitivity that surrounds such data.
Furthermore, companies must bear in mind the penalties for any possible data breaches; a circumstance that further underscores the need for robust internal processes and controls regarding the handling of personal data. This may require some organizations to review and possibly overhaul their existing data handling practices in order to fully comply with the regulators’ D&I proposals.
As businesses begin to incorporate these requirements, active engagement with external counsel and ongoing review will be crucial. These endeavors can ensure that firms are both fulfilling their D&I reporting duties whilst not compromising on their data protection obligations.