The checklist will give you an insight about where your organisation is with data protection from a data privacy and technical security perspective. The checklists form part of the Best Practice library which includes contextualised guidance, documents and resources on specific areas of data processing. The checklists form part of the ICO Accountability Framework which helps organisations with their governance and corporate risk management where it relates to data protection. The checklists cover all aspects of the framework, enabling you to assess against organisation baselines:
- Leadership & Oversight
- Risk Management (DPIA's)
- Policies & Procedures
- Individual Rights
- Contracts & Data Sharing
- Transparency
- Training & Awareness
- Records Management
- Monitoring Verification & Reporting (Data Breaches, SARs and FOI's)
- Response & Enforcement (SARs and FOI's)
DPIA
The DPIA checklist asks questions to help the organisation understand what a data protection impact assessment is and how to view the risks. It is linked to both the DPIA Best Practice Area and the Supplier Due Diligence Best Practice Area. Supplier due diligence and DPIA's are a core part of data protection methodology.Answer a sample DPIA checklist question:
DPE customers can get started on completing the DPIA checklist here: