| Secondly, employers need to conduct an audit of their data handling and implement the audit assessment. The Information Commissioner defines a data audit as:
"A systematic and independent examination to determine whether activities involving the processing of personal data are carried out in accordance with an organisation's data protection policies and procedures, and whether this processing meets the requirements of the Data Protection Act 1998". |