Policy-procedure detailing the arrangement in place to manage and protect data, including personal data, and information assets.

This procedure provides an overview of how information assets and data are managed listing the various registers, policies and privacy notices that are in use and can be easily edited to reflect the arrangements within your organisation.

Procedure includes the following sections;

a. Statement of Intent

b. Responsibilities for Data Protection

c. Management of Personal Data

d. Personal Data Review and Retention

e. Lawful Basis / Consent

f. Special Category Data / Sensitive Personal Data

g. Personal Data Processing / Transfer

h. Data and Information Security

i. Transparency and Data Subject Access

j. Data Breach Procedures

Features guidance boxes covering: special category data, security, transparency, reporting breaches.