Review all your databases, email lists, spreadsheets, paper documents and other lists of personal data. If there are any issues: identify what you need to do. If action is not clear, then highlight questions needing further insight. New consent forms, privacy notices, and new or revised policies or procedures may need to be implemented to ensure compliance with GDPR. Example Why is Basis for Who What How long Is this Action Description the processing holds the security is data covered Required? data data data and Controls kept for? by our held who can are in privacy and access place? notice? what is it? used for? Examples: For Legal Held by Paper Six Yes. Passwords Gift Aid claiming obligation. Gift Aid declarations complete protect Declarations Gift Aid. Officer. kept in a calendar spreadsheet. Also filing years after accessed cabinet. last gift by Spreadsheet claimed on Treasurer. on PC. the declaration. Directory Users Email e.g Mailing list
Review all your databases, email lists, spreadsheets, paper documents and other lists of personal data. If there are any issues: identify what you need to do. If action is not clear, then highlight questions needing further insight. New consent forms, privacy notices, and new or revised policies or procedures may need to be implemented to ensure compliance with GDPR. Example Description Why is the data held and what is used for? Basis for processing data Who holds the data and who can access it? What security Controls are in place? How long is data kept for? Is this covered by our privacy notice? Action Required? Examples: Gift Aid Declarations For claiming Gift Aid. Legal obligation. Held by Gift Aid Officer. Also accessed by Treasurer. Paper declarations kept in a filing cabinet. Spreadsheet on PC. Six complete calendar years after last gift claimed on the declaration. Yes. Passwords protect spreadsheet. Directory Users Email e.g Mailing list
2.-cf-example----church-data-audit-form.docx