Let’s understand your organisation.

Which organisation are you answering for?

Use the name of the business, institution or other organisation you are answering for. A short reference is enough at this stage.

See an example

If you are discussing one clinic, shop or company, use that organisation’s name rather than the name of an individual customer.

What does the organisation do?

Select all that apply.

This asks what kind of work the organisation does. More than one area may be relevant.

See an example

An organisation may manufacture products and sell them online. Consider all the activities you want this assessment to cover.

Anything else about the business? (optional)

Add a short description if the available sector choices do not explain your work.

See an example

For example, a repair workshop, professional association or a business with several different activities.

Roughly how many people work in the organisation?

Choose the range that roughly describes the number of people in the organisation.

See an example

An owner-managed business and a company with several departments can use the same assessment. The size answer alone does not decide legal responsibilities.

Whose information does the organisation handle?

Select all that apply.

Think about the people whose information appears in your records. These individuals are often called Data Principals.

See an example

Names and phone numbers on orders relate to customers; application forms relate to job applicants; a supplier employee’s work contact details relate to that individual.

Any important activity we should know about? (optional)

Use this space to explain an activity or type of information that the earlier choices do not capture well.

See an example

You could describe identity checks, health records, location tracking or sharing with an overseas provider. Describe the work; do not paste actual identity documents, customer details or staff records.