IT Governance Blog on IT governance, risk management, compliance and information security.

The Information Commissioner’s Office (ICO) have launched a new Guide to Data Protection which aims to “provide businesses and organisations with practical advice about the Data Protection Act and dispel myths. The guide will help organisations safeguard personal data and comply with the law.” explained Christopher Graham, Information Commissioner.

This new guide will help organisations comply with the law and demystify data protection. Once you have read it, you will need make an assessment of your current level of compliance with the DPA.

Our DPA Compliance Assessment Tool will help you with this. It also provides recommendations and identifies guidance to help you close any gaps that are identified.

Sooner or later, it’ll become blindingly obvious that there is a fair amount of documentation involved with DPA compliance. Our DPA Compliance Toolkit contains the document templates and tools that are essential for any UK data controller (and UK organisation that is responsible for personal information) seeking compliance with the UK Data Protection Act 1998.

Order & Download the DPA Compliance Toolkit Today! This DPA Compliance Toolkit is designed to integrate with our ISO27001 ISMS Documentation Toolkit. It contains the following documents:

• Data Protection Policy
• Access Control Policy
• Fair Processing Notice
• Data classification procedure
• Data retention guidelines and data retention procedure
• Procedure for secure disposal of removable storage media
• Log for recording disposal of removable storage media
• Procedure for reporting information security weaknesses and events
• Log for recording reports of information security weaknesses and events
• Employee Acceptable Use Agreement (including acceptance of monitoring), plus user registration procedure and user access rights
• Laptop Acceptable Use Agreement
• Guidelines for laptop hard drive encryption
• Removable media (e.g. USB sticks, tapes) procedure
• Staff induction PowerPoint® presentation: ‘My Role in Data Protection’
• Procedure for subject access requests and SAR form
• Compliance audit checklist
• Procedure for disclosing data to a third party
• ICO Code of Practice for CCTV data collection.

Don’t risk a formal undertaking, hefty fine or evern a jail sentence.

Meet the requirements of the Data Protection Act. Order This Toolkit Today!