Policies and Procedures

2.1 Direction and Support
Your organisation's policies and procedures provide your staff with enough direction to understand their roles and responsibilities regarding data protection and information governance.

2.1.1 The policy framework stems from strategic business planning for data protection and information governance, which the highest management level endorses.

2.1.2 Policies cover data protection, records management and information security.

2.1.3 You make operational procedures, guidance and manuals readily available to support data protection policies and provide direction to operational staff.

2.1.4 Policies and procedures clearly outline roles and responsibilities.