This Register is used to summarise personal data collected, held or processed and includes a Record of Processing Activities (ROPA), summary of data transfers, access requests, data breaches and a data deletion schedule.

This Excel spreadsheet has been setup with input-lists to control data entry on the key sheets where data in input to ensure data entry is consistent and to facilitate filtering and lookups based on the data entered.

The workbook includes a personal data register sheet where personal data is entered against a specific Data Category which is intended to be granular, the same category can be entered on this sheet multiple times, using a different description of the personal data to differentiate and detail different personal data within the category.

For all entries on the personal data sheet can specify the following;

• Data Category
• Description of the Personal Data
• Processing operation & purpose
• Sharing / Transfer Details
• Where stored / held & Protection – Security Controls in place
• Lawful Basis
• Responsibility
• Data Subject Rights
• Retention Schedule
• Disposal
• Special Category status
• Data Protection Impact Assessment (DPIA) status

Summary of the data entered is automatically populated on DPP-Output sheet where it can be copied /pasted into relevant privacy notice such as the Data Protection Policy.

Workbook also includes the following worksheets;

• Data-Transfers - this sheet can be used to log further details about any transfer of personal data, controls in place and details of contract / data transfer processing agreement pertaining to these transfers.
  
• Access-Requests -  this sheet can be used to document Subject Access Requests (SAR's) and further details relating to SAR's can also be documented using the form F-Q73-Personal-Data-Subject-Access-Request
• Data-Breach-Register - this sheet can be used to document any potential or actual data breaches and further details can also be documented using the form F-Q74-Data-Breach-Form
• Data-Deletion-Schedule - this sheet can be used to keep track of any data shceduled for deletion.
• DPP-Output - this sheet is a summary of the data entered on the Personal-Data-Register sheet and can be copied/pasted into a relevant privacy notice such as the P-25_Data_Protection_Policy