Audit

Those business practices impacting the organisation’s approach to the GDPR in a material way are assessed by management against regulatory requirements and/or independently audited on an annual basis and the results are reported to the relevant board sub-committee