In April 2018 the ICO published a report on it's findings from an ICO information risk review at eight charities, based on the eight principles of good information handling. The report is intended to help charities to recognise where they can make improvements in the same areas. It lists the areas of good practice, along with areas for improvement including governance, policies and procedures, monitoring and reporting, training, consent, fair processing and data sharing, business continuity, incident reporting, and retention and disposal.
View report here