# Internal Privacy Audit Report Template

## Report Header

| Field | Value |
|-------|-------|
| Report Number | PA-[YEAR]-Q[QUARTER]-[SEQ] |
| Report Classification | Confidential |
| Audit Title | [Title] |
| Audit Period | [Start Date] to [End Date] |
| Report Date | [YYYY-MM-DD] |
| Lead Auditor | [Name] |
| Audit Team | [Names] |
| Distribution | [Recipients] |

## 1. Executive Summary

**Audit Objective**: [One-sentence statement of what the audit evaluated]

**Overall Rating**: [ ] Satisfactory [ ] Needs Improvement [ ] Unsatisfactory

**Finding Summary**:

| Severity | Count |
|----------|-------|
| Critical | |
| High | |
| Medium | |
| Low | |
| Advisory | |
| **Total** | |

**Key Themes**: [2-3 bullet points summarizing the main findings]

## 2. Audit Scope and Approach

**Scope**: [Detailed description of what was audited]

**Regulations/Standards Tested Against**: [List]

**Methodology**: [Sampling approach, testing techniques, tools used]

**Period Covered**: [Date range]

**Limitations**: [Any scope limitations or constraints]

## 3. Findings and Recommendations

### Finding [#]: [Title]

**Finding ID**: PA-[YEAR]-Q[Q]-[SEQ]
**Severity**: [ ] Critical [ ] High [ ] Medium [ ] Low [ ] Advisory

**Condition** (What did we find?):
[Factual description of the issue with specific data]

**Criteria** (What should be happening?):
[Regulatory requirement, policy, or standard being violated]

**Cause** (Why did it happen?):
[Root cause analysis]

**Consequence** (What is the risk?):
[Impact if not remediated]

**Recommendation**:
[Specific, actionable recommendations]

**Management Response**:
- **Agree/Disagree**: [ ] Agree [ ] Disagree
- **Response**: [Management's planned remediation]
- **Remediation Owner**: [Name and title]
- **Target Date**: [YYYY-MM-DD]

---

*[Repeat Finding section for each finding]*

## 4. Prior Audit Follow-Up

| Finding ID | Title | Original Date | Severity | Status | Verification |
|-----------|-------|--------------|----------|--------|-------------|
| | | | | [ ] Closed [ ] Open [ ] Overdue | |

## 5. Appendices

### A. Documents Reviewed
- [List of documents]

### B. Personnel Interviewed
| Name | Title | Date |
|------|-------|------|
| | | |

### C. Sample Details
| Population | Size | Sample | Method |
|-----------|------|--------|--------|
| | | | |

## Approvals

| Role | Name | Signature | Date |
|------|------|-----------|------|
| Lead Auditor | | | |
| Chief Audit Executive | | | |
| Audit Client (Acknowledged) | | | |