How to perform a GDPR Compliance Audit

A data protection compliance audit will determine whether your controls, policies and procedures meet the requirements of the General Data Protection Regulation (GDPR) and, if not, where they need to be improved.

This book is designed to save your business money and maximise data protection compliance.

The book provides an easy to follow guide on how to complete a General Data Protection Regulation (GDPR) audit. The audit comprises 98 questions. Most questions include additional guidance notes and the relevant GDPR Articles and Recitals.

The audit covers the following:

1. Structure and accountability within your organisation.

2. Overview of your data processing operations.

3. Involvement of third parties (data processors).

4. Transparency information requirements and ensuring the rights of data subjects.

5. Compliance and risk management.

6. Records management.

7. Use of CCTV.

8. Data breaches.

Compliance with data protection rules is not only a matter of risk minimisation. Compliance can:

• Increase customer and employee confidence in the company.

• Enhance brand image.

• Help in the management of company information.

• Act as a reminder to protect company data and company secrets.

• Facilitate future products and services using such data - customer data is a key asset to the company.

• Add to the value of the customer information and the value of the company.

About the Author

Kieran McLaughlin is a former practising barrister who now works as a data protection and legal consultant.