The period of notice outlining the intention to audit and the type of compliance audit carried out by the Office of the Data Protection Commissioner depends on the circumstances and reasons as to why the organisation is being audited. The standard practice within the Office of the Data Protection Commissioner is to issue a written notice of intention to audit several weeks in advance to the data controller or processor (see below). However, in situations where a complaint is under investigation, the Office may choose to give a few days notice only. Section 24 of the Data Protection.
