The checklist will give you an insight about where your organisation is with data protection from a data privacy and technical security perspective. The checklists form part of the Best Practice library which includes contextualised guidance, documents and resources on specific areas of data processing. The checklists form part of the ICO Accountability Framework which helps organisations with their governance and corporate risk management where it relates to data protection. The checklists cover all aspects of the framework, enabling you to assess against organisation baselines:
- Leadership & Oversight
- Risk Management (DPIA's)
- Policies & Procedures
- Individual Rights
- Contracts & Data Sharing
- Transparency
- Training & Awareness
- Records Management
- Monitoring Verification & Reporting (Data Breaches, SARs and FOI's)
- Response & Enforcement (SARs and FOI's)
Information Classification
This article highlights the Information Classification checklist. Information classification is the process of categorising information based on its sensitivity, value, and importance to an organisation. This classification helps in determining the appropriate level of protection and handling procedures required for different types of information.The checklist asks questions about whether best practice has been communicated to the organisation about information classification and whether the organisation has assessed and understands the classfications.
Answer a sample Information Classification checklist question:
DPE customers can get started on completing the Information Classification checklist here: