Remote Access Policy

1. General

OMSUK Ltd restrict access to client data and ensure client privacy. This is achieved in various ways as stated in this document.

2. Access Levels

2.1 New OMSUK staff will be given restricted access to all client data during their onboarding and probation periods.

2.2 Clients can request access to specific data be restricted to any OMSUK staff (one or multiple).

2.3 OMSUK staff are given tiered access depending on their support level, contractual requirements of the client, client requests and nature of daily requirements.

3. Types of restrictions

OMSUK restrict remote access to the following kinds of data:

3.1 Collected client business data.

3.2 Collected client personal data.

3.3 Client held data files.

3.4 Client workstations and servers using ad-hoc or MDM/RMM based tools.

3.5 Client configurations (including, but not limited to hosted services configuration and data, cloud services configuration and data, network configuration and data, other configuration and data).

4. Requirements for Remote Device Connections

Remote device connections (such as VNC) are restricted by MDM policy. OMSUK staff will not connect to a client device for “screen sharing” tasks unless:

4.1 The client has given direct permission in person, via telephone, via email or via written communication.

4.2 The client has provided permission via an employee with specific rights to do so.

4.3 There is a legitimate issue in contacting the client and a genuine need arises.

4.4 There is an immediate requirement for the protection of the client (such as possible immediate data loss, system failure etc.).

4.5 Previous permission has been granted by the client for a specified timeframe.

Clients can contact OMSUK to limit or expand on these default requirements at any time and OMSUK will communicate this with it’s staff to ensure client needs are met.

5. No Third Parties

Nothing in this Agreement is intended to, nor shall it confer any rights on a third party.

6. Governing Law and Jurisdiction

This Policy shall be governed by and construed in accordance with the law of England OR Scotland and the parties hereby submit to the exclusive jurisdiction of the English OR Scottish courts.

7. Data Protection & the General Data Protection Regulations (“GDPR”)

Please refer to our Privacy Notice for information on your rights and our obligations to you under Data Protection and the General Data Protection Regulations (“GDPR”).

This is available at https://www.omsuk.com/privacy