1. Processing Data
   Ruth Boardman
2. Consequences of Failure
   Ruth Boardman
3. Preparations for Audit
   Ruth Boardman
4. The Audit
   Ruth Boardman
5. Basic Compliance 1: The Strategy, its Promulgation and Enforcement
   Ruth Boardman
6. Basic Compliance 2: Notification
   Ruth Boardman
7. Principle 1: Fairly and Lawfully
   Ruth Boardman
8. Principles 2 to 5: Data Quality
   Ruth Boardman
9. Principle 5: Data Subjects’ Rights
   Ruth Boardman
10. Principle 7: Security
    Ruth Boardman
11. Principle 8: Transborder Dataflows
    Ruth Boardman
12. Special Cases
    Ruth Boardman
13. Electronic Mail
    Ruth Boardman
14. Maintaining Data Protection Compliance
    Ruth Boardman
15. Checklist for the Data Protection Officer and others
    Ruth Boardman

2. Consequences of Failure -  Ruth Boardman
Criminal sanctions, Legal actions, Bad publicity

3. Preparations for Audit -  Ruth Boardman
Role and scope, Procedures, The Commissioner’s Audit Manual

4. The Audit -  Ruth Boardman
Records and their processing, Data Subjects, Files, Processing, Checklist of audit questions, Interpreting the results of the audit

5. Basic Compliance 1: The Strategy, its Promulgation and Enforcement -  Ruth Boardman
Strategy, The Data Protection Officer, Policy and procedures, Contracts, Promulgation, Enforcement

6. Basic Compliance 2: Notification -  Ruth Boardman
Notification, Exemptions, Practicalities 1: how to notify, Practicalities 2: keeping the notification up-to-date

7. Principle 1: Fairly and Lawfully -  Ruth Boardman
Fairness, Preconditions to processing, Lawfulness, Practical conclusions

8. Principles 2 to 5: Data Quality -  Ruth Boardman
2nd Principle: the purpose, 3rd Principle: adequate, 4th Principle: accurate and up-to-date, 5th Principle: no longer than necessary, The Purposes: a checklist

9. Principle 5: Data Subjects’ Rights -  Ruth Boardman
Data subjects’ rights, Right of access

10. Principle 7: Security -  Ruth Boardman
7th Principle, Security assessment, Employee assessment, Data processors

11. Principle 8: Transborder Dataflows -  Ruth Boardman
The prohibition of transfer, Types of data transfer, Possible solutions to the 8th Principle prohibition

12. Special Cases -  Ruth Boardman
Special types of data, Exemptions, Transitional arrangements

13. Electronic Mail -  Ruth Boardman
Ordinary Mail, Why e-mail is different, Monitoring e-mails, An e-mail policy – some checklists

14. Maintaining Data Protection Compliance -  Ruth Boardman
The changing law, The changing organisation, Data Protection Officer’s report to the Board

15. Checklist for the Data Protection Officer and others -  Ruth Boardman
Relations with the Board, Relations with Human Resources Department, Relations with the IT Department, Relations with the webmaster, Relations with Corporate Security, Relations with the Legal Department, Relations with Direct Marketing and Publicity, Relations with foreign subsidiaries and partners, Relations with Information Commissioner