Guide to Data Protection Auditing - What is a Data Protection Audit?


			Data Protection Homepage Audit Guide Homepage Download print version


Next >
	What is a Data Protection Audit? (print ref: Part 1, Section 4) For the purposes of the guide we will define a Data Protection Audit as: "A systematic and independent examination to determine whether activities involving the processing of personal data are carried out in accordance with an organisation's data protection policies and procedures, and whether this processing meets the requirements of the Data Protection Act 1998". The key points about Data Protection Audits that can be extracted from this definition are that: They involve a systematic approach They are carried out, where possible, by independent auditors who ideally have received relevant training They are conducted in accordance with a documented audit procedure Their outcome is a documented Audit Report It is recognised that the smaller organisations may have resource limitations making it difficult to find fully independent auditors or to provide comprehensive training. Further information on this topic can be found in section 1.3 of Part 3.
Next >

What is a Data Protection Audit? (print ref: Part 1, Section 4)