Monitoring, Audits & Continuous Improvement
The last workshop turns the programme into an ongoing cycle. Accountability means being able to show that data protection works: indicators, internal audits, corrective actions and an annual management review.
Workshop 13 video
Walkthrough of the workshop and its tasks — coming soon
What ResGuard provides
- Audit module with an online questionnaire for process owners and automatic reminders every 3 days until it is completed
- Data Protection Dashboard with compliance score and indicators
- Data protection report for management with one click
- Template for the management review and annual report
Workshop tasks
-
1. Define key indicators
Pick a few indicators: requests answered on time, incidents, training rate, RoPA activities reviewed and vendors assessed.
In ResGuard: Data Protection Dashboard -
2. Internal audit programme
Plan at least one audit per entity per year, with a defined scope and auditors independent of the area audited.
In ResGuard: Audit -
3. Carry out the internal audit
Check per area what has changed and whether processes work in practice: RoPA, retention, vendors, policies, training and incidents.
In ResGuard: Audit -
4. Corrective actions
Turn every finding into an action with an owner and deadline, and check its effectiveness in the next audit.
In ResGuard: Objective Manager -
5. Management review
Once a year, present indicators, audits, incidents, legal changes and resources, and agree on next year's objectives.
In ResGuard: Policy Framework -
6. Workshop review & close-out
Review the results, attach evidence and close the objective in ResGuard.
In ResGuard: Objective Manager
What to keep in mind in Chile
- The Agency can impose fines of up to 5,000 UTM for minor, 10,000 UTM for serious and 20,000 UTM for very serious infringements; for repeat offences, large companies can be fined up to 4% of their annual income.
- Sanctions are published in the National Register of Sanctions and Compliance.
- A documented prevention model with internal audits and an action plan demonstrates diligence during an inspection.
Expected result
- Key indicators defined and communicated
- Audit programme approved and first audit completed
- Corrective actions tracked
- Management review and annual report completed
ResGuard modules: Audit, Data Protection Dashboard, Objective Manager