
Digital & Data Compliance Requirements for Smaller Authorities
Council
Date
| TASK | ACTION NEEDED | STATUS y/n |
|---|---|---|
| Website domain and ownership reviewed | Ensure domain is council owned | y |
| Website meets WCAG 2.2 AA/ Accessibility Regulations | Undertake accessibility audit, publish statement | y |
| Website includes FOI & Transparency Code documentation | Check publication scheme, accounts, minutes etc | y |
| Generic council email on authority owned domain | Move away from personal or free email accounts | y |
| Data audit completed | Map data flows, update records | Y |
| Policies in place: Data Protection, IT usage, Information Security | Create or update policies, assign responsibilities | y |
| Staff and members trained on data protection & IT security | Schedule training, record attendance | n |
| Workflow for data subject rights/ FOI requests established | Include clauses on device use, remote access, passwords | Y |
| Review cycle for policies, website and domain | Set next review date, assign owner | Y |
Choose which cookies you are happy for us to use. You can change your mind at any time from the Cookie settings button.
Needed for the website to work and to keep it secure, for example remembering your cookie choices, keeping a basket or booking together and protecting forms from spam. These are always on.
Remember choices you make, such as how a list is displayed, so the site works the way you prefer.
Help us understand how visitors use the website so we can improve it.
Used by third-party services such as maps, videos and social media, which may track you across other websites.