Assertion 10 Checklist
2025/26
This document is provided for record purposes and may not be fully accessible.
Please scroll down for the accessible version.
Please scroll down for the accessible version.
Millom Without Parish Council
Governance/Audit
ASSERTION 10 CHECKLIST
Digital & Data Compliance Requirements for Smaller Authorities
Council
Date
| TASK | ACTION NEEDED | STATUS y/n |
|---|---|---|
| Website domain and ownership reviewed | Ensure domain is council owned | y |
| Website meets WCAG 2.2 AA/ Accessibility Regulations | Undertake accessibility audit, publish statement | y |
| Website includes FOI & Transparency Code documentation | Check publication scheme, accounts, minutes etc | y |
| Generic council email on authority owned domain | Move away from personal or free email accounts | y |
| Data audit completed | Map data flows, update records | Y |
| Policies in place: Data Protection, IT usage, Information Security | Create or update policies, assign responsibilities | y |
| Staff and members trained on data protection & IT security | Schedule training, record attendance | n |
| Workflow for data subject rights/ FOI requests established | Include clauses on device use, remote access, passwords | Y |
| Review cycle for policies, website and domain | Set next review date, assign owner | Y |
Scroll to view the full table