top of page

Privacy programme resources

You have appropriate resources in place to handle requests from individuals about their personal information.

Best Practice

  • The organisation has appointed a specific person/s or team as responsible for managing and responding to requests.

  • Team members receive specialised training to handle requests, including regular refresher training.

  • Your organisation has sufficient resources to deal with requests.

  • If a team member is absent, other team members have been trained to carry out key tasks.

  • Your organisation can deal with any increase in requests or reduction in staffing levels.

Accountability Check

  1. Are team members aware of their key responsibilities and how to deliver them in practice?

  2. Would the team say that there are appropriate resources to deal with the volume of requests?

  3. In the case of team absences, could key tasks in the request process be covered by more than one individual?

bottom of page