Charities urged to use new ICO tool to audit their data protection compliance

10 Oct 2024 News

Information Commissioner’s Office

The Information Commissioner’s Office (ICO) has published a new audit framework to help charities and other organisations assess their compliance with legal data protection requirements. 

Its audit framework, published this week, is an extension of the watchdog’s accountability framework. 

It has nine toolkits that cover accountability, records management, information and cybersecurity, training and awareness, data sharing, requests for data, personal data breach management, artificial intelligence and age-appropriate design. 

Each toolkit has a downloadable data protection audit tracker that helps organisations conduct their own assessment of compliance and track actions that must be taken in areas that need improvement. 

The framework helps organisations to identify steps to improve their data protection practices and develop a culture of compliance. 

It also gives organisations a starting point to evaluate how they handle and protect personal information.

‘Much-needed clarity and guidance’

Steph Graham, chief executive of data management firm GoodCRM, told Civil Society: “The release of this new audit framework from the ICO is great news for organisations that may otherwise struggle to fully understand the regulations and risk non-compliance. 

“More toolkits and resources from the regulator can only be a positive development, providing much-needed clarity and guidance.”

Ian Hulme, ICO director of regulatory assurance, said: “Transparency and accountability in data protection are essential, not just for regulatory compliance but for building trust with the public.

“Research shows us that people increasingly value the responsible use of their personal information, and want organisations to be able to demonstrate strong data protection practices.

“Our new audit framework will help build trust and encourage a positive data protection culture, as well as being flexible in targeting the most pressing areas of compliance. 

“We want to empower organisations to embrace data protection as an asset, not just a legal requirement.”

For more news, interviews, opinion and analysis about charities and the voluntary sector, sign up to receive the free Civil Society daily news bulletin here.

 

More on