skip to primary navigationskip to content

Data Audits

The ICO updates its guidance on General Data Protection Regulation (GDPR) and Data Protection Act 2018 (DPA) regularly. It also offers a range of resources and support that can be accessed here.

A useful step in documenting all data processing activities you undertake is to conduction an information/data audit. For more information, see ICO’s guidance relating to Data Audits.

The Office of Intercollegiate Services issued guidance to Senior Bursars in March 2017 on conducting data audits in preparation for GDPR. It included the following templates that Colleges may find useful as a reference source as they develop their approaches to data protection compliance monitoring:


Colleges are strongly advised to spend time reviewing these audits and data flows to ensure clarity and transparency of their approach to personal data management under the current Data Protection legislation. This is irrespective of whether Colleges used the above templates or other versions obtained independently during their preparations for GDPR.