1.4#5 Article 1.2 1.6 Article 2.6 1.7 Article 4.1(5) Do you collect and process personal information through digital mediums? Have you organised any NDPR awareness seminar for your members of staff or suppliers? Have you conducted a detailed audit of your privacy and data protection practices? Have you set out the management support and 1.8 Article 2.5 direction for data protection compliance in a framework of policies and procedures? 1.9 Article 2.1 Do you have a Data Protection compliance and review mechanism? Have you developed a capacity building plan for 1.10 Article 2.6 compliance with data protection for all members of staff? 1.11 Article 3.1(1) Do you know the types of personal data you hold? 1.12 Article 4.1(5) Do you know the sources of the personal data you hold? 1.13 Article 4.1(5) Who do you share personal data with? 1.14 Article 4.1(2) Who is responsible for your compliance with data protection laws and processes? 1.15 Article 1.3 Have you assessed whether you are a Data Controller or Data Processor? Have you reviewed your Human Resources policy to 1.16 Art 4.1(5) ensure personal data of employees are handled in compliance with the NDPR? Have appropriate technical and organisational 1.17 Article 2.5(d) measures been implemented to show you have considered and integrated data protection into your processing activities? Do you have a policy for conducting Data Protection 1.18 Article 4.1(5) Impact Assessment (DPIA) on existing or potential projects? 31 | P a g e