GDPR data mapping inventory audit

1 day data mapping audit and the creation of a ‘record of processing activity inventory’ (half day on site and half day for inventory write up) in order to comply with article 30 of the GDPR.

The audit will identify and record the following:

• The categories of personal data held by the school
• Location where the data is held
• Who the data is shared with
• How long the data is kept for
• What the lawful basis is for processing the data
• General description of the security measures in place to protect the data