GDPR Audit in Care Homes

This GDPR checklist can be used to conduct an information audit to determine what information is processed, who has access to it, a legal justification for the data processing activities, etc.

Library
Healthcare
GDPR Audit in Care Homes

Personal Data

Retention Of Personal Data

Third Party Agreements

Is this sample what you are looking for?
Sign up to use & customise this template, or create your own custom checklist:

Checklist by GoAudits.com – Please note that this checklist is intended as an example. We do not guarantee compliance with the laws applicable to your territory or industry. You should seek professional advice to determine how this checklist should be adapted to your workplace or jurisdiction.

Seeing is Believing

Get a live demo customized to your unique needs, or get started with a 14-day FREE trial.

GDPR Audit in Care Homes

This GDPR checklist can be used to conduct an information audit to determine what information is processed, who has access to it, a legal justification for the data processing activities, etc.

1. Is the Organisation's Registration Certificate with the Information Commissioner's office in Date?

2. Has a Data Protection Officer been appointed?

3. Is the GDPR training for relevant staff up to date?

4. Is personal data being obtained directly from individuals or from authorised representatives?

5. Is consent being obtained to collect personal data?

6. Why is the personal data needed?

1. Has unsuccessful staff applications and information of clients that have not taken up services, been deleted?

2. Is Information on former employees and clients being kept within the personal data retention periods?

3. Is personal data that is no longer needed being destroyed?

4. Is personal data being kept accurate and up to date?

5. Are restrictions in place to ensure who can access and use personal data?

1. Are any third party softwares used?

2. Are employee details stored on these softwares / platforms?

3. Is there an agreement in place with all the third party softwares mentioned above?

4. What software is used by staff for communicating within themselves?

5. Is there an agreement in place with the above software?

6. Is there an agreement in place with the Recruitment Services used by the organisation?

7. Is there an agreement in place with Direct Debit Services or other payment services used?

8. Are agreements in place with any other third party service provider that has access to staff / resident information?