Chapter 23 — Privacy and data protection: evaluation

Lesson map

Lesson 23 published. Map, example, EX067.

flowchart TD
  N0["Learning outcomes"]
  N1["23.1 Comparison"]
  N2["23.2 Remaining gaps"]
  N3["23.3 Priorities"]
  N4["23.4 Report"]
  N0 --> N1 --> N2 --> N3 --> N4
  N4 --> EX["Worked example"]
  EX --> Q["Exercise EX067"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["23.1 Comparison"]
  N2["23.2 Remaining gaps"]
  N3["23.3 Priorities"]
  N4["23.4 Report"]
  N0 --> N1 --> N2 --> N3 --> N4 --> Q["EX067"]

[Learning outcomes]
    |
    v
[23.1 Comparison]
    |
    v
[23.2 Remaining gaps]
    |
    v
[23.3 Priorities]
    |
    v
[23.4 Report]
    |
    v
[Worked example] --> [Exercise EX067]

Learning outcomes

You will (1) evaluate the privacy programme; (2) compare against baseline; (3) recommend priorities.

23.1 Comparison

Aisha compares current metrics with the baseline: stale accounts down from forty to two, CCTV retention met, access request coverage complete. She presents each metric with its baseline date and method, so the comparison is fair. Some improvements are large and clear. Others, like breach reports rising from almost none to six a month, need explanation: more reports show better awareness, not more breaches. She avoids claiming that the programme caused every change without supporting evidence. Each comparison cites its source. Context prevents misreading.

23.2 Remaining gaps

Free-text health notes remain hard to detect, and vendor monitoring is manual. Health information in free text remains a weakness because the scanner cannot reliably find it. Vendor monitoring depends on someone reading emails about subprocessor changes, which is easy to miss. CCTV access is logged at only thirty clubs because ten older recorders lack the feature. Aisha lists these gaps openly so that leaders understand what the programme does not yet cover. Each gap gets a named owner. None are hidden in footnotes or appendices.

23.3 Priorities

She recommends training trainers on notes and automating vendor checks. Training trainers to keep health notes inside the protected app field addresses the first gap at low cost. Automated vendor checks could compare vendor subprocessor lists monthly. Replacing the ten old recorders needs budget, so she estimates the cost and the risk reduction. She ranks priorities by risk reduction per unit of effort, which helps leaders choose. Trainer training costs a single afternoon per region and reduces the largest remaining exposure quickly.

23.4 Report

She presents to the data protection officer. Mr. Reilly notes that evaluation turns activity into evidence. The report is short: what was found, what changed, what remains and what she recommends. It includes the evidence for each claim. The data protection officer accepts the first two priorities and asks the finance director about recorder replacement. Mr. Reilly tells Aisha that a balanced evaluation is more credible than one that claims full success. The report runs to two pages in total. Leaders read all of it.

Worked example

Aisha shows improvement against the baseline, names remaining gaps and recommends priorities.

Synthetic case. Results are synthetic.

Errors and limits

Improvements may reflect measurement changes.

Exercises

• EX067 — Improvement. Name one improvement.
  Show marking criteria

  Rubric: 3 = stale accounts forty to two; CCTV met; full SAR coverage;; 2 = one;; 1 = vague;; 0 = none.
• EX068 — Remaining gap. Name one remaining gap.
  Show marking criteria

  Rubric: 3 = free-text health notes; manual vendor monitoring;; 2 = one;; 1 = vague;; 0 = none.
• EX069 — Priority. What did Aisha recommend?
  Show marking criteria

  Rubric: 3 = trainer training and automated vendor checks;; 2 = one;; 1 = vague;; 0 = none.