Policy template

Data Protection (Privacy) Policy template

This policy exists to ensure personal data is processed lawfully, fairly and securely, and that the rights of individuals are respected. It applies to all processing of personal data of customers, staff, suppliers and other individuals.

Create this policy

What the policy contains

Principles
Rights of individuals
Security, processors and transfers

Who is responsible

Management
Data protection contact
Process owners
All staff and contractors

What you decide

Data protection contact
Requests from individuals answered within (days)
Personal data is transferred outside the EEA

References covered

ISO/IEC 27001 Annex A: control 5.31
ISO/IEC 27001 Annex A: control 5.34
GDPR: Art. 5 principles
GDPR: Art. 6 lawfulness of processing
GDPR: Art. 12–22 rights of the data subject
GDPR: Art. 28 processor
GDPR: Art. 30 records of processing activities
GDPR: Art. 32 security of processing
GDPR: Art. 33–34 personal data breaches
GDPR: Art. 35 data protection impact assessment

Data Protection (Privacy) Policy template

What the policy contains

Who is responsible

What you decide

References covered

Other policy templates

Data Protection (Privacy) Policy template

What the policy contains

Who is responsible

What you decide

References covered

Other policy templates