A quick way to check your data protection arrangements are in place, including how AI tools and automated decisions are handled.

Effective Form Templates

This form template is supplied in fully editable MS Word format and can be easily customised and edited. The document uses pre-defined style formatting throughout, with all text in Calibri font for improved readability.
The following document labelling is included in the footer:

• Form number and title
• Information-classification
• Version
• Page number / total pages

alphaZ documents - beautifully designed, tried and tested form templates. No junk, jargon or unnecessary content. Simple and usable form templates developed over 25 years through practical use in the real world.

Further Reading

Further guidance on data protection compliance:

• Data Protection and UK GDPR
• Personnel Records and Data Protection
• ISO 42001 Annex A.9 - Use of AI Systems
• Legal and Compliance knowledge base

Logo Update Service

Download this form template with your company name and logo already added!
Document Preparation is included with the alphaZ subscription.

How to Download

This file is included in the alphaZ subscription. This form is also included in the GDPR / Data Protection Toolkit, so the toolkit route gives you this file plus everything else you need in one download.

Need Help Implementing?

If you'd like hands-on help reviewing your data protection compliance, our remote support services provide direct expert input from our team, by the day, by project, or on an ongoing basis.

Personal Data Protection Compliance Checklist Template

A compliance checklist for reviewing your organisation's arrangements for managing and protecting personal data, against the data protection legislation listed on your legal register. Each requirement has space to record the arrangements in place and any actions required.

What's Included in this Checklist

• Personal Data and Processing Activities and Special Category and Criminal Offence Data
• Data Retention and Deletion and Policies and Transparency
• Data Protection Fee / DPO and Awareness / Training
• Privacy by Design and Data Protection Impact Assessment (DPIA)
• Use of AI and Automated Decisions
• Consent, Data Subject Access and Complaints
• Transfer of Personal Data, Data / Information Security and Data Breaches
• Website / email, with notes, comments and actions required

Who Needs a Data Protection Compliance Checklist?

Any organisation that wants to check its data protection arrangements periodically, before an audit, or after a change such as introducing AI tools or new software.

Included in the GDPR / Data Protection Toolkit

This form is part of the GDPR / Data Protection Toolkit - the registers, forms, policies, procedure and guidance for documenting how you collect and process personal data, in one download.

Works with the Data Protection Audit Checklist

For an internal audit of the same ground, the A-C_P47 Data Protection Audit Checklist sets the questions out in the audit checklist format.

Using the Checklist

Work down each requirement, record the arrangements in place and the evidence for them, and note any actions required. Keep the completed checklist as the record of the review, and repeat it periodically or when arrangements change.

AI Use and Automated Decisions

Use of AI and automated decisions are requirements in their own right on the checklist, so the AI tools used with personal data, and any software that makes or supports decisions about people, are reviewed alongside everything else.

Following Up Actions

Record the actions arising in your issues and actions register so they are tracked to completion.

Related Documents

Other documents in the GDPR / Data Protection Toolkit that work alongside this one:

• A-C_P47 Data Protection Audit Checklist
• PP-1-16 Data Protection Policy Procedure
• F-IMS24 Personal Data Register
• F-Q97 Data Protection Impact Assessment

Evidence of Review

A completed checklist, dated and signed off, is a straightforward record that data protection arrangements have been reviewed, which is useful for management review and when customers or auditors ask.