APPENDIX B DATA AUDIT Description Type of Where Where Where is Why is Lawful basis for If legal If Do Who is Who has Retention Risks GDPR data does is data this data holding data: quote piece Consent existing the access period compliant of data held The data processed held i.e. (choose one): of required policy/ data to this data stored (location) purpose Consent legislation: procedure shared and how come Contract has cover with is it from Legal obligation consent individual secured Vital interest been rights Public task obtained including Legitimate where how the – interest is this? Early Years Setting delete or provide data on request Data
APPENDIX B DATA AUDIT Description of data held Type of data Where does The data come from Where is data stored Where is data processed (location) Why is this data held i.e. purpose Lawful basis for holding data: (choose one): Consent Contract Legal obligation Vital interest Public task Legitimate interest If legal quote piece of legislation: If Consent has consent been obtained – where is this? Do existing policy/ procedure cover individual rights including how the Early Years Setting delete or provide data on request Who is the data shared with Who has access to this and how is it secured Retention period Risks GDPR compliant Data required
EY-GDPR-Appenidces-V3-03-04-18.docx