Demonstrating Privacy
Compliance
Including -- Privacy Self-Assessment Questionnaire
Published by: ICX
Authors: Brian Harrison (SITI-GRCS), Les Riley (SITI-GRCS),
Dean Marriott (Consignia)
Due publication date: TBA
Current Version: DRAFT
Cost: Electronic version is free to Members
How do I obtain this: Contact
ICX
Abstract: This guidebook defines a flexible
common audit process that can be used by all interested parties
in demonstrating compliance with the Code of Conduct to company
management and regulators.
Background
In response to the EU's directive on Privacy
and Data Protection, ICX (International Commerce Exchange)
has produced a Code of Conduct on the Protection of Individuals
with Regard to the Processing of Personal Data and on the
Free Movement of Such Data.
The Code of Conduct states: "To ensure
that the policies, processes and procedures, introduced by
an organisation to ensure compliance with the requirements
of the Directive, are effective and are maintained to reflect
changes within the organisation, periodic audits must be carried
out. An initial, in depth, audit should be performed as a
priority. Subsequent audits should be carried out annually
.."
For
a more detailed introduction to this see the attached Word
Document
|