The checklist will give you an insight about where your organisation is with data protection from a data privacy and technical security perspective. The checklists form part of the Best Practice library which includes contextualised guidance, documents and resources on specific areas of data processing. The checklists form part of the ICO Accountability Framework which helps organisations with their governance and corporate risk management where it relates to data protection. The checklists cover all aspects of the framework, enabling you to assess against organisation baselines:
- Leadership & Oversight
- Risk Management (DPIA's)
- Policies & Procedures
- Individual Rights
- Contracts & Data Sharing
- Transparency
- Training & Awareness
- Records Management
- Monitoring Verification & Reporting (Data Breaches, SARs and FOI's)
- Response & Enforcement (SARs and FOI's)
Data Retention and Destruction
The Data Retention and Destruction checklist helps an organisation think about what data they are keeping and how long they are keeping it for. It links to the Records Management Best Practice Area where there is a document Records Management Policy (53 KB) , and links to the DfE requirements. The area includes guidance for keeping emails and a set of slides to share with staff about records management.We have a number of articles about Records Management which can be viewed here:
Product Focus on Checklists : Data Retention and Destruction
Where is your data stored?
Guardians of Privacy: 7. Social Media Data Retention
Guidance for the use of school email and applying email retention in schools
How Long Should You Keep Personal Data For?
Blog: Best Practice on the Retention of Child Protection Information
Email and retention periods
Answer a sample data retention and destruction checklist question:
DPE customers can get started on completing the Data Retention and Destruction checklist here: