PARISH DATA AUDIT Getting ready for GDPR Review all your databases, email lists, spreadsheets, paper documents and other lists of personal data. If there are any issues, identify what you need to do. If action is not clear, then highlight questions needing further insight. New consent forms, privacy notices, and new or revised policies or procedures may need to be implemented to ensure compliance with GDPR. Description Why is the data Basis for Who holds the What security How long is data Is this covered ACTION REQUIRED held and what is it processing data data and who can controls are in kept for? by our privacy used for (e.g. consent, legal access it? place? notice? obligation etc) Example: For claiming Gift Legal obligation Held by Gift Aid Paper declarations Six complete Yes Password protect Gift Aid Aid Officer. Also kept in a filing calendar years the spreadsheet Declarations accessed by cabinet. after last gift treasurer Spreadsheet on claimed on the PC. declaration
PARISH DATA AUDIT Getting ready for GDPR Review all your databases, email lists, spreadsheets, paper documents and other lists of personal data. If there are any issues, identify what you need to do. If action is not clear, then highlight questions needing further insight. New consent forms, privacy notices, and new or revised policies or procedures may need to be implemented to ensure compliance with GDPR. Description Why is the data held and what is it used for Basis for processing data (e.g. consent, legal obligation etc) Who holds the data and who can access it? What security controls are in place? How long is data kept for? Is this covered by our privacy notice? ACTION REQUIRED Example: Gift Aid Declarations For claiming Gift Aid Legal obligation Held by Gift Aid Officer. Also accessed by treasurer Paper declarations kept in a filing cabinet. Spreadsheet on PC. Six complete calendar years after last gift claimed on the declaration Yes Password protect the spreadsheet
Data-Audit.docx