The checklist will give you an insight about where your organisation is with data protection from a data privacy and technical security perspective. The checklists form part of the Best Practice library which includes contextualised guidance, documents and resources on specific areas of data processing. The checklists form part of the ICO Accountability Framework which helps organisations with their governance and corporate risk management where it relates to data protection. The checklists cover all aspects of the framework, enabling you to assess against organisation baselines:
- Leadership & Oversight
- Risk Management (DPIA's)
- Policies & Procedures
- Individual Rights
- Contracts & Data Sharing
- Transparency
- Training & Awareness
- Records Management
- Monitoring Verification & Reporting (Data Breaches, SARs and FOI's)
- Response & Enforcement (SARs and FOI's)
Data Breaches
The data breach checklist asks questions about recognising a data breaches and the procedures in place for reporting one. It links to the Data Breach Best Practice Area, which offers support and guidance with a data breach procedure template, e-learning and drip feed posters, FAQs. There are template letters for when a data breach happens and help around gathering information after a major data breach such as a cyber attack. There are examples of data breaches to help the organisation recognise them.Answer a sample Data Breach checklist question:
DPE customers can get started on completing the Data Breach checklist here: