It is important to realise that Data Protection auditing, however, the organization will consider the following categories

• First party Internal By the organisation on itself
• Second party Supplier By the organisation on a supplier or sub-contractor
• Third party External By the supervisory authority, its sub-contractors, or an independent consultant on the organisation