Privacy Assessment Process » FAQ Categories »

How do I amend or cancel an assessment?

If you wish to reschedule or cancel your assessment, you are required to do so at least four weeks prior to the assessment commencement date. After this point a cancellation fee of 25% of the total cost is chargeable. Please note that the IPA are entitled to recover any costs they have incurred relating to an assessment, regardless of the notice provided. Please submit your amendment or cancellation request to

How do I book a Privacy Assessment?

Please complete the Privacy Assessment Online Booking Form available here. A member of the SECAS team will contact you to discuss your request. Please note that requested assessment dates are required to be at least twelve weeks after the date your request is submitted. Security and Privacy Assessments can be performed by the User Competent Independent Organisation (CIO) and IPA in parallel.

The rate card can be found in the documents section of this page, following member login.

What is the Privacy Controls Framework?

The SEC Panel has arranged the development of a Privacy Controls Framework (PCF). The Framework includes:

  • Arrangements designed to ensure that Privacy Assessments provide reasonable assurance that Other Users are complying with their SEC obligations under Sections I1.2 to I1.5; and
  • The Principles and criteria to be applied in the carrying out of any Privacy Assessment, including principles designed to ensure that Privacy Assessments take place on a consistent basis across all Other Users; and
  • The Provisions for determining the timing, frequency and selection of Other Users for the purposes of Random Sample Privacy Assessments.

For more information please see the Privacy Controls webpage.