Data Sharing And Subject Access Checklist – 123DPO

Data Sharing And Subject Access

Please use this quick quiz to find out how ready you are for GDPR. Explanations of the questions will be displayed at the end of the quiz.

There are 11 questions

Step 1: Management And Organisational Data Sharing

1.1 Data sharing policy

Your business has communicated policies, procedures and guidance to all staff which clearly set out when it is appropriate to share or disclose data.

Hint

Step 1: Management And Organisational Data Sharing

1.2 Accountability

Your business has assigned responsibility to an appropriate member of staff for ensuring effective data sharing.

Hint

Step 1: Management And Organisational Data Sharing

1.3 Staff training

Your business provides adequate training on an ongoing basis for staff that are regularly required to make decisions regarding whether or not personal data should be shared with third parties.

Hint

Step 2: Data Sharing Records

2.1 Decision log

Your business maintains a log of all decisions to share personal data and this is reviewed regularly.

Hint

Step 2: Data Sharing Records

2.2 Information sharing agreements

Your business trains its staff (to ensure that they have sufficient understanding of how) to operate the CCTV system and cameras (if applicable). Your business trains its staff to recognise requests for CCTV information/images.

Hint

Step 3: Registration

3.1 Fair processing

our business informs individuals about the sharing of their personal data.

Hint

Step 3: Registration

3.2 ICO registration

Your business has considered whether you need to provide the Information Commissioner's Office (ICO) with a description of the individuals or organisations to whom you intend or may wish to disclose personal data.

Hint

Step 4: Security

4.1 Security measures

Your business has appropriate security measures in place to protect data in transit, received by your business and transferred to another business.

Hint

Step 5: Subject Access

5.1 Subject access process

Your business has a documented process for processing subject access requests which has been effectively implemented. Your business has measures in place to ensure requests are appropriately recognised, timescales are met and the appropriate information is provided.

Hint

Step 5: Subject Access

5.2 Accountability and training

Your business has appropriately resourced and trained all personnel assigned responsibility for processing subject access requests. Your business has made all personnel aware of their responsibility to support subject access requests and where in the organisation they should direct requests to.

Hint

Step 5: Subject Access

5.3 Compliance monitoring

The process is monitored and reviewed and, where necessary, additional measures have been implemented to improve compliance.

Hint

Thank you for completing the Data Sharing And Subject Access

E-mail

Name

Phone

Company

Time is Up!

Time's up