Closes 9 December 2019.
The ICO has issued a consultation on an accountability toolkit. The General Data Protection Regulation 2018 introduced an accountability principle, which requires data controllers to demonstrate their compliance with the law through internal data protection measures and practices. These could, and in some circumstances must, include:
The ICO plans to create a toolkit to help organisations to assess whether they have appropriate and effective internal data protection governance arrangements in place and to help them demonstrate their compliance to the ICO, the public, or a business customer.
This is the first stage of the ICO’s consultation process, where it is looking for views on:
The consultation ends on 9 December 2019. The ICO has also published a blog post on the issue.