Necessary security and service logs
Define ownership, expected evidence, monitoring and escalation before relying on this control.
World time
Legal & Access / COHSEW knowledge
Internet Privacy Statement
How the public website approaches analytics, cookies, forms, links and online security.
Objective
What this area means for safer, healthier and more responsible operations.
The website may process technical information needed to deliver pages securely and information voluntarily submitted through forms or email. COHSEW should describe any optional analytics or cookies before use and explain that external websites operate under their own privacy terms.
COHSEW principleUse competent, risk-based assurance to prevent harm, verify control and support continual improvement.
Priority controls
Where organisations should focus.
Priorities must be adapted to the organisation, activity, location, affected people and applicable legal requirements.
Clear cookie and analytics choices
Define ownership, expected evidence, monitoring and escalation before relying on this control.
Secure handling of online enquiries
Define ownership, expected evidence, monitoring and escalation before relying on this control.
Transparency about external links
Define ownership, expected evidence, monitoring and escalation before relying on this control.
How COHSEW supports you
From risk question to measurable assurance.
Our specialists help organisations select proportionate methods, preserve independence and turn technical evidence into action.
- 01Review browser and cookie settings
Agree the scope, accountable owner, evidence and success measures, then review effectiveness over time.
- 02Avoid entering sensitive health data in general contact forms
Agree the scope, accountable owner, evidence and success measures, then review effectiveness over time.
- 03Use the privacy contact for access or deletion questions
Agree the scope, accountable owner, evidence and success measures, then review effectiveness over time.
Authoritative guidance
Continue with the primary sources.
These external resources informed this page. Always confirm current national law, regulator guidance and contractual requirements for your location.
01UK Information Commissioner's Office
Data protection guidance for organisations
Open official source ↗02ISO/IECISO/IEC 27001 information security
Open official source ↗Information on this page supports awareness and programme design. It is not legal, medical or regulatory advice, does not reproduce the full text of any standard and does not replace competent assessment of your specific circumstances.
Need a programme for Internet Privacy Statement?