← All ten parts of the guide

Running the organisation

Data protection, digital, premises, insurance, risk and working with others.

1 step.

This is the part nobody plans for: the lease, the insurance renewal, the data breach, the subject access request that arrives with a one-month clock already running.

Small charities are not exempt from data protection law. Being a charity caps what you pay the ICO; it does not excuse the fee. The exemption that does excuse it is open to any organisation, is all or nothing, and a single CCTV camera loses it for everything you do.

Understand

Explainers for this part are not published yet.

Look up

Glossary

Tools

  • Is this a serious incident? — Tool: planned

Templates

  • Sanctions screening procedure — Template: planned

Do

The rest of the guide