The Information Commissioner’s Office (ICO) has launched a new audit framework designed to help organisations assess their own compliance with key requirements under data protection law.

The framework will help organisations identify necessary steps to improve their data protection practices and create a culture of compliance, providing these organisations with a starting point to evaluate how they handle and protect personal information.

The framework, an extension of the ICO’s existing accountability framework, will be pertinent for senior management, data protection officers, compliance auditors, or those responsible for records management or cybersecurity.

It offers practical tools for building and maintaining strong privacy management, with nine toolkits covering key areas from accountability and data sharing, to personal data breach management and AI.

Each toolkit will come with a downloadable data protection audit tracker that will help organisations conduct continued assessment of their won compliance.

Recommended reading

• Labour Party Reprimanded by ICO Over Information Request Backlog
• Northern Ireland Police Service Fined £750K After Data Breach
• Which Data Breaches Had Everyone Talking This Year?

“Transparency and accountability in data protection are essential, not just for regulatory compliance but for building trust with the public,” Ian Hulme, ICO director of regulatory assurance, said. “Research shows us that people increasingly value the responsible use of their personal information, and want organisations to be able to demonstrate strong data protection practices.

“Our new audit framework will help build trust and encourage a positive data protection culture, as well as being flexible in targeting the most pressing areas of compliance. We want to empower organisations to embrace data protection as an asset, not just a legal requirement.”