Home

Buy Stay Legal

E-commerce

Documentation

Data Protection
- Data Security

Testimonials

About Us

Data Protection Audit

General
Do you hold personal data about others?	Yes No
If so, who authorizes the data collection?
For what purpose is the information collected?
What categories of information are collected E.g. name, address, telephone number.
How is the information collected? Is it collected face to face with the individual or at a distance?
From where is the personal data collected?
What form of data protection notice is given to individuals when the information is collected?
How often is this notice reviewed or changed?
Who reviews or changes the notice?

Storage, Processing and Disclosure
Where does your department store the personal information? E.g. on computer in manual files.
What processing activities are carried out by your department?
Do any third parties process data on your behalf? If yes please provide a name.	Yes No
Who authorizes these processing activities?
Who has authority to change, add or delete data held by you?
Who has access to such personal data within your department?
Who authorises the access to personal data?
Do you consider that your department holds any sensitive personal data? If so, please describe these sensitive personal data and the purposes for which they are held. Sensitive personal data means any data that relate to a person's: political opinions, trade union membership, religious beliefs, physical or mental condition, sexual life, commission or alleged commission of an offence, or the sentence of any court.	Yes No
Do you disclose sensitive personal data to: other departments, other companies in the group, joint venture partners, third parties, or others.	Yes No
Do you disclose information to other countries?	Yes No

Subject Access Procedures
How do you handle procedure when receiving a request from an individual to reveal what data you hold in relation to the subject?
What procedures exist in your department for suppression, blocking or correction of personal data?
Who authorizes these activities?

Data Quality
Who in your department has responsibility for reviewing personal data for relevance, accuracy and keeping personal data up to date? How often are these activities carried out?

Security
What security measures do you have in place to ensure the personal data is secured?

Destruction or Archiving
How long is personal information kept in your department before being destroyed or archived?
In what format or on what medium is the archived information stored?
Who authorises destruction?
Who authorises archiving?
Please describe the archiving procedures in operation in your department:
Please describe the back-up procedures in operation in your department:

Training
Do the employees in your department receive training on data protection law and other relevant law? If so, who is responsible for carrying out the training?
Are refresher courses held? If so, how often and who is directed to attend?

Finish
E-mail Address:
Contact Name:
Additional Comments:

"Commercial lawyers that provide a no-nonsense creative legal service for creative people"