Audits are an important part of clinical governance which is a framework that helps continuously improve quality, safeguard standards and best practice while identifying needs and areas for improvement. Par 4 of the Data Protection Act Code of Practice suggests that an impact assessment of sensitive data which involves: