How to Conduct a Data Protection Audit


This course is available by: Classroom, Virtual-LIVE and eLearning


This course can be attended on an in-person basis at dedicated training venues (the yellow box below lists the upcoming dates and cities). There are ample opportunities to network with other delegates during coffee breaks and at the sit-down lunch.
Classroom Training Courses

Virtual-LIVE (WEBEX)

For those who prefer undertaking LIVE training remotely, PDP’s virtual courses allow delegates to interact directly with the trainer and to participate in group activities, mirroring the typical structure of Classroom sessions.
Virtual Training Courses


PDP’s eLearning courses are facilitated via a dedicated learning platform using videos, supplementary documentation and multiple choice self-assessment questions. The content can be viewed at any time allowing delegates to train around other commitments. Find out more information on PDP’s eLearning courses.

















 How to Conduct a Data Protection Audit


Course Overview:

Data protection compliance audits, or reviews, are invaluable for organisations in assessing their current state of data protection compliance. They can identify where the organisation is getting things right, as well as reveal where there are weaknesses which require action or changes to internal procedures.

The Information Commissioner’s Office (ICO) has recommended that regular compliance reviews are undertaken as part of ongoing internal management of data protection.

Compliance reviews can be conducted either internally or by external consultants. Either way, the person conducting the review should go about the task in the most efficient and effective way. This course offers practical guidance on conducting data protection audits/reviews, and covers:

  • the purpose of data protection audits/reviews
  • deciding what to review: how to identify the areas that are relevant
  • undertaking the audit: guidance on the practical methodology as well as how, what and who to ask in relevant staff interviews
  • determining whether audited processes meet both data protection requirements and internal policies/procedures
  • what to look for when auditing arrangements with third party suppliers
  • how to report the results of an audit and how to recommend any remedial action that is needed
  • the ICO’s recommendations for conducting audits

Sample checklists and audit templates will be provided to delegates.

It is recommended that delegates attending this course have some existing knowledge of data protection. Those with no existing knowledge should attend Data Protection Essential Knowledge – Level 1 before attending this course.

Course Trainer

Olivia Whitcroft

Olivia Whitcroft,


Trainer's biography
and other courses
by this Trainer

Upcoming Training Dates
Virtual LIVE (Webex)Thursday, 11 July 2024
London (Classroom)Wednesday, 04 December 2024


- Classroom - £595.00 plus VAT
- Virtual-LIVE (WEBEX) - £495.00 plus VAT
- eLearning - £395.00 plus VAT

Additional Information:

- Classroom/Virtual-LIVE - 10.00am to 4.00pm
- eLearning - on-demand training available immediately

Discounts available:
Classroom / Virtual-LIVE:
10% discount for additional delegates for this course when booked together

20% discount for additional delegates booked together (up to 5). Group Licences also available

Who should attend:
Data Protection Officers, Information Officers, Compliance Officers, In-house Lawyers, Company Secretaries, Risk Management Officers, Internal Audit staff, Information Security Officers and others (private or public sector).



Practitioner Certificate in Data Protection (PC.dp.)


Practitioner Certificate in Freedom of Information (PC.foi.)




View training courses by:


Course Testimonials

"Very clear and concise - lots of good tips and some useful materials provided."
Sara Jones
Turning Point

"Great to be able to do it at my own pace, good questions at the end of each section, and very useful resources."
Harriet Jones

"Comprehensive and informative. The course contained lots of information that is really helpful, but at the same time quite realistic. Will certainly help with the audits I need to do and grateful for the guidance."
John Sharples

"The eLearning course gives comprehensive guidance on what is needed to conduct both internal and external audits in concise and easy to understand language. It will form the foundation of audits we will be carrying out."
Andrew Stedman
Conservative Party

"Comprehensive, clear and informative. Very much enjoyed this eLearning course."
Tracey Evans
Blue Earth Diagnostics

"The eLearning course is explicit and detailed enough to carry out a successful data protection audit."
Samuel Afeni

"The online version of the course was good, the dashboard/online platform was user friendly and it was a pretty smooth journey. I’ve been very impressed with the service and quality from PDP since I began training with them in 2018."
Dean Marshall
Home Office

"The content of the eLearning course was good and the appendices available to download were very helpful."
Pamela Forde
Royal College of Physicians

"Usual high standard eLearning course. The depth of knowledge and expertise is great as always. Includes really good pointers, advice and things like templates to help when conducting audits myself."
Steve Alexander
Watford FC

"I enjoyed the eLearning course. The presenter was excellent."
Audrey Barrett

"I thoroughly enjoyed the eLearning course - it was well paced, nicely presented and most informative. The video tutorials worked well and made the process of eLearning enjoyable and engaging."
Durham Burt
University of York

"A comprehensive and well-structured training course which was easy to understand and absorb. The video content with supporting documentation is a helpful approach. The questions at the end of each section were helpful to test my learning. I would definitely recommend this course to others."
Vickie Ambrose
Creative Scotland

"I thought the eLearning course was very good, clear and practical. It is good to be able to do an hour or so, stop and then come back to where you left off.  The content was just about right I felt."
Grellan O’Kelly

"I thought the eLearning course was good!"
Carina Myles
Northern Trust

"This training (eLearning) is well structured and presented. All chapters of the module are explained clearly by the trainer, with written materials cementing what had been learned. The slides could also be revisited if needed and finally, the test questions after each chapter allowed the learner to check whether the information had been understood correctly. Excellent course."
Esther Parker-Duber
Criminal Cases Review Commission

"I found the eLearning course of excellent quality with great content and some very useful tips and templates."
Juraj Szabo
CIF Pension Administration Services

"The eLearning course is well thought out, comprehensive and good quality, plus useful to have the self-assessment questions."
Su Longden
University of Chichester

"I found it a very useful session to help crystallise and draw together my existing thoughts and awareness. I actually found eLearning a really effective way to learn."
Molly Swann
Legal & General

"I enjoyed the e-learning as an alternative way of delivery. There was more focus on the subject at hand. Maybe this was the presenter’s style, good editing or a combination of both. It also allowed you the ability to pause the course and take in the information being provided."

Matthew Foster
Wrexham County Borough Council

"Case study very useful. Well run course, tutor explains concepts clearly."
Sandra Himmans

"All aspects of the course were excellent. Thank you very much!"
Rick Chatfield
Civil Aviation Authority

"Very good."
Sean Topping

"Especially useful were the practical examples."
Gillian Dunn
Royal Air Force

"The eLearning course is well-structured, easy to follow, with excellent points of reference. I enjoyed the eLearning experience, thank you!"
Trevor Beckford
Office of the Information Commissioner (Jersey)