There are typically three stages to auditing your data protection standards:

​1 Initial meeting with management to review data protection policies and procedures and to agree timing and arrangements for the audit itself.

​2 On site audit, comprising principally of interviews with staff from the various business departments, but also including an inspection tour of your premises, directly observing data handling practice.

​3 An off-site review by us of your existing data protection related documentation, e.g:

• Data protection policies
• Codes of practice
• Privacy statements
• Information security policies
• Access controls
• Incident logs
• Subject access request logs
• Report logs (whether to the DPC or direct to data subjects)
• Training material
• Employment contracts
• Contracts with clients
• Contracts with service providers