Conducting a Data Protection Audit - A ‘How To’ Guide
Introduction
Over 4 years on from the introduction of the General Data Protection Regulation (GDPR), and with increasing regulatory focus on data protection and e-privacy compliance, now is an opportune time to undertake an audit of your data estate.
Undertaking an audit can arise for a number of reasons, be that to better understand the information your organisation holds, to refresh and roll out new policies, or to meet the demands of increasingly demanding legislation in the most effective way possible.
Presented by expert speaker Robert Bond, this practical, interactive seminar will offer guidance on how to successfully undertake a desk-based audit.
What You Will Learn
This course will cover the following:
- Determining who should take part in an audit and effective stakeholder management
- Issuing effective questionnaires and conducting interviews
- Highlighting areas of business risk
- How to assess what data is held and undertake a data mapping exercise
- How to interpret materials, draw conclusions and deliver findings
- How to effectively communicate your findings to the business and key stakeholders
- How to take the audit findings and translate them into a governance strategy
- Additional requirements imposed by the e-Privacy Regulation and the Online Safety Act
- Interactive audit exercises