Table of Content: An outline of suggested content within template.
05.01 - Statement of Policy
The Data Protection Compliance Audit policy enables <<Organisation>> to establish good practices...
05.02 - Policy Scope
<<Organisation>> has a statutory obligation to process personal data in accordance with the...
05.03 - Policy Requirements
<<Organisation>> has a legal obligation to comply with GENERAL data protection legislation....
05.04 - Audit Objectives
When carrying out a Data Protection Audit in any area of an organisation the Auditor has three clear...
05.05 - Audit Principles
This policy places specific emphasis on:
Accountability: Under GENERAL data protection legislation,...
05.06 - Audit Scope
This policy is owned by the Information Management and Compliance Department. The review process will...
05.07 - Audit Schedule
The effectiveness of the policy will be monitored on a regular basis over and above the two year review...
05.08 - Audit Categories
It is important to realise that Data Protection auditing, however, the organization will consider the...
05.09 - Audit Responsibilities
Top Management
The CEO or MD of <<Organisation>> is the Data Controller and as such has...
05.10 - Log of Compliance Audits
The DPO (or designate) will establish and maintain a log of privacy audits. At a minimum, the log will...