Registration Responsibilities
You must check each new user very carefully. It is your responsibility to ensure that all the registrants details are correct.
Under data protection law, you could be prosecuted for any data breach due to inappropriate access granted.
You must check that:
All the registrants details are correct.
That you are required to register this person for a legitimate purpose and/or obtained their consent.
That you have made every effort to validate the information provided.
You should use your common sense to check the details. Check:
The users email format is consistent with other users at the same organisation.
The users phone number details are consistent with the organisation.
The postcode is the correct one for the organisation.
It is especially important that you check that the level of access requested is consistent with their job-title, role and staff grade.
Do not grant access to anybody unless you are satisfied that the request is genuine and can be verified.
Do not grant access to anybody by default.
Do not grant access to anybody if there is any element of doubt.
If you become aware that a colleague has left the team, be sure to suspend their access from the application.
Close