19.

Undertake
4.
7.
10.
1. fsdgd Undertake
fsdgdan fsdgd
information
anfsdgd
information
fsdg
audit
Undertake
to
auditunderstand
to aninformation
information
information
auditaudit
to
audit
to to
2. Undertake
20.understand
Undertakeanwhat
information
an
data
information
we hold,
audit where
to
auditunderstand
toit understand
is, format,
what where
data
whatwe data
it is
hold,
we
Undertake
obtained
where
hold, where
it is,
from,
an
format,
it information
is,
basis
format,
where
for holding
where
audit
it is obtained
to
it
it is
(consent/legal
understand
obtained
from, from,
basis
whatbasis).dsadsa
basis
for
data holding
for it
information
format,
(consent/legal
holding it
where
(consent/legal
auditformat,
basis).
to understand
where
basis).dsadsa
format,
what where
data we format,
hold, where
where itformat,
is,
where format,
format, where it where
format,
is obtained
format,
wherefrom,
where
format, basis
where
for holding
format,itwhere format,
3.
6.
9.
12.
22.
5. where
8.
11.(consent/legal
Identify
Identify
format,
meansmeans where
basis).dsadsa
to “demonstrate
to
format,
“demonstrate
where
23. Identify
21.format, wheremeans
compliance” format, fsdfsd
– i.e.to where
How we are
“demonstrate
we
format, meeting
are where
meeting the requirements,
format,
the where
requirements,
format,
following
where vb
compliance”
format, conduct
codes where
–ofi.e.as they are
conduct
format,
How we
as
whereissued,
they paper
are meeting
are trails
issued, of
the paper to data
requirements,
trails of
processing
2. following
Identify means
decisions and,
codes
relating where appropriate,
toof“demonstrate
to
conduct
data processing privacy
as they areand, impact
issued,
where paperappropriate,
trails of
assessments.xvxcv
privacy
decisions impact
compliance” relatingassessments.
– i.e.
to data
How processing
we are meeting and, where
the requirements,
appropriate,
followingimpact
privacy codesassessments.
of conduct as they are issued, paper trails of
decisions relating to data processing and, where appropriate,
privacy impact assessments.
fsdgd fsdgd fsdgd fsdgd fsdgd fd fsdgdfsdf dsffasfs sdfsd fsd
Undertake an information audit to understand
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdvxcvxcvxcfsdf dsffasfs sdfsd
fsd fsdgdvxcvxcvxcfsdf dsffasfs sdfsd fsd

fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
13. fsdgd fsdgd fsdgd fsdgd fsdgdr fsddasdas data processing
and, where appropriate, privacy format, where it is obtained from,
basis for holding it (consent/legal basis).

14. Identify means to “demonstrate

15. format, where it is obtained from, basis for holding it
(consent/legal basis).

16. Identify means to “demonstrate

17. format, where it is obtained from, basis for holding it
(consent/legal basis).

18. Identify means to “demonstrate

impact assessments.
data processing and, where appropriate, privacy impact
assessments.
gd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd rwerwe fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
1.
2. Undertake an information audit to understand what data we hold,
where it is, format, where it is obtained from, basis for holding it
(consent/legal basis).

3. Identify means to “demonstrate

compliance” – i.e. How we are meeting the requirements,
following codes of conduct as they are issued, paper trails of
decisions relating to data processing and, where appropriate,
privacy impact assessments.
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdg data processing and, where appropriate,
privacy impact assessments.
data processing and, where appropriate, privacy impact
assessments.
d fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsff data
processing and, where appropriate, privacy impact assessments.
data processing and, where appropriate, privacy impact
assessments.
asfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgrd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgr fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
ffsdgd fsdgd fsdgd data processing and, where appropriate,
privacy impact assessments.
data processing and, where appropriate, privacy impact
assessments.
fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd
fsdgd fsdgd fsdgd fsdgd fsdgd fsdgd fsdgdfsdf dsffasfs sdfsd fsd