Guidance on remediation action plans
We have issued guidance to support businesses in preparing remediation action plans in response to areas of identified non-compliance. A remediation action plan may be required as a result of findings from an Examination, a self-identified breach notification or another form of review.
The purpose of the guidance is to provide practical information to be considered by businesses when planning for remediation. In particular, we have detailed examples of good practice for businesses to consider when preparing a remediation action plan, as well as considerations for resourcing remediation and post remediation monitoring.