05 – Template Content – EU GDPR

Table of Content: An outline of suggested content within template.


05.01 - Statement of Policy

The Data Protection Compliance Audit policy enables <<Organisation>> to establish good practices...

05.02 - Policy Scope

<<Organisation>> has a statutory obligation to process personal data in accordance with the...

05.03 - Policy Requirements

<<Organisation>> has a legal obligation to comply with GENERAL data protection legislation....

05.04 - Audit Objectives

When carrying out a Data Protection Audit in any area of an organisation the Auditor has three clear...

05.05 - Audit Principles

This policy places specific emphasis on: Accountability: Under GENERAL data protection legislation,...

05.06 - Audit Scope

This policy is owned by the Information Management and Compliance Department. The review process will...

05.07 - Audit Schedule

The effectiveness of the policy will be monitored on a regular basis over and above the two year review...

05.08 - Audit Categories

It is important to realise that Data Protection auditing, however, the organization will consider the...

05.09 - Audit Responsibilities

Top Management The CEO or MD of <<Organisation>> is the Data Controller and as such has...

05.10 - Log of Compliance Audits

The DPO (or designate) will establish and maintain a log of privacy audits. At a minimum, the log will...