The audit lesson left you with a list of every account, consent, and registration in your legal name. This lesson teaches you to grade each item by risk, so you know which to address first, which to leave alone, and which to never touch.
The wrong order can cost you. Withdraw the wrong consent in the wrong sequence and you will find yourself unable to pay rent, locked out of a bank account, or worse, in a tribunal you were not ready for. Grade properly and the work proceeds at the pace you choose, with no nasty surprises.
The grid
Every item from the audit gets two scores, each from 1 to 3.
Cost of leaving it (CoL). What does it cost you, in money, time, attention, or future risk, to leave this consent or registration in place exactly as it is?
- 1: trivial. Marketing emails. Old accounts you never see.
- 2: meaningful. Recurring payments you no longer want. Insurance you do not use.
- 3: serious. Active surveillance hooks. Statutory obligations that compound (PAYE, council tax) where overpayment, mis-categorisation, or unnoticed data sharing accumulates.
Cost of moving it (CoM). What does it cost you, in money, time, retaliation risk, or service loss, to actually withdraw, contest, or close it?
- 1: trivial. Marketing list. Closed account. Deletion-of-data request.
- 2: meaningful. Switching banks. Cancelling a contract early. Asserting jurisdiction on a parking notice.
- 3: serious. Anything that touches PAYE, child registration, vehicle keepership, mortgage, or court orders. Mistakes here have consequences that take years to undo.
Plot the two scores against each other and you get a 3-by-3 grid with nine cells. The order of work falls out of the grid mechanically.
The four zones
Zone 1: low cost to leave, low cost to move (CoL 1, CoM 1). Do these first, this week. They cost nothing and they give you the practice. Marketing list withdrawals, dormant account closures, deletion-of-data requests against bodies you no longer deal with. Eight or ten of these in a fortnight teaches you the format and builds the file. They also clean up your inbox.
Zone 2: high cost to leave, low cost to move (CoL 2-3, CoM 1). Do these second. These are the items where the system is doing something you do not want, and the move is straightforward. The classic example is unsubscribing your live bank account from credit-reference profiling for marketing purposes (allowed under UK GDPR Article 21, low friction, real upside). Another is the data-portability request to a defunct social network. High value for low effort.
Zone 3: low cost to leave, high cost to move (CoL 1, CoM 2-3). Leave these alone. The classic example is the historical entry that produced your legal person itself. The cost of trying to undo a 1985 birth registration is enormous (refusal, escalation, tribunal) and the upside is essentially nil because the entry is referenced everywhere else regardless. Another example is the PAYE registration while you remain in standard employment. The cost of contesting that mid-career is real (employer goes to HMRC, HMRC goes back to you, problem solved against you). The cost of leaving it is, while you remain employed, low.
Zone 4: high cost to leave, high cost to move (CoL 2-3, CoM 2-3). This is the danger zone and the strategy zone combined. These are the matters that justified buying this course in the first place: council tax positions for someone leaving the standard workforce, vehicle V5C decisions for someone working out from under standard licensing, conditional-acceptance correspondence with HMRC for the self-employed restructuring their affairs. They need the full notice sequence in module 4, the supporting paperwork from the toolkit, and the patience to run a six-to-twelve-week correspondence properly. Do not start these until you have run several Zone 1 and Zone 2 items and have the format and the record file working smoothly.
Five worked examples from a typical audit
1. Tesco Clubcard marketing emails. CoL 1, CoM 1. Withdraw consent under Article 21 this weekend. Three minutes.
2. Closed Halifax credit card, balance zero, account closed 2019. CoL 2 (they still hold five years of transactional data and share it for fraud-prevention purposes), CoM 1 (one written deletion request to their data protection officer, citing UK GDPR Article 17, retention period exceeded). Do this in the first month.
3. NHS Summary Care Record. CoL 2 (your medical history is shared by default with bodies including private contractors), CoM 1 (single written opt-out to your GP). Do in the first month.
4. Council tax for the band-D semi you live in and own outright. CoL 3 if you are working towards a lawful position on it, CoM 3 (council will not voluntarily relinquish jurisdiction, the matter will run six-to-twelve weeks of correspondence, with liability order risk). Zone 4. Do not begin until module 5 lesson 1 has been read carefully and the audit and record file are in place.
5. PAYE registration while currently employed at a standard salary. CoL 1 (the system is functioning as designed and you have no immediate need to disrupt it), CoM 3 (any attempt to disrupt while in employment will be rejected by HMRC and the employer; cost is high). Zone 3. Leave alone until and unless you are leaving employment for self-employment, at which point the matter migrates to Zone 4 and is handled then.
The order of work
By the end of the grading you should have a single page that looks like this:
Zone 1, do this fortnight: [list of 8-12 items] Zone 2, do over the next two months: [list of 4-8 items] Zone 3, leave alone for now: [list of 5-15 items] Zone 4, plan and prepare: [list of 1-4 items, each with a target start date once the prior work is done]
That page is the working plan for the next six months. You will adjust it as you go, but the discipline is to follow the order. Zone 1 first, then Zone 2, then Zone 4 with full preparation. Skipping ahead is the most common cause of avoidable trouble.
Hold the line
It is tempting to look at the grid and start with Zone 4 because Zone 4 is the dramatic one. The Zone 1 items feel like housekeeping. They are housekeeping, and they are the practice ground that makes Zone 4 survivable. The notice you eventually send to your council in week 12 is technically the same shape as the deletion request you sent to a defunct retailer in week 1. By the time you get to Zone 4, the format and the posture are second nature.
There is no prize for tackling the hardest matter first. There is a real cost for trying.