A quick way to check your data protection arrangements are in place, including how AI tools and automated decisions are handled.
This form template is supplied in fully editable MS Word format and can be easily customised and edited. The document uses pre-defined style formatting throughout, with all text in Calibri font for improved readability.
The following document labelling is included in the footer:
- Form number and title
- Information-classification
- Version
- Page number / total pages
alphaZ documents - beautifully designed, tried and tested form templates. No junk, jargon or unnecessary content. Simple and usable form templates
developed over 25 years through practical use in the real world.
Further guidance on data protection compliance:
Download this form template with your company name and logo already added!
Document Preparation available with all document toolkits.
To get access to this file please click on Add to Cart to purchase for immediate download. If you have an alphaZ Subscription just click on Download Files to view all the files available to download. This form is also included in the GDPR / Data Protection Toolkit, so the toolkit route gives you this file plus everything else you need in one download.
If you'd like hands-on help reviewing your data protection compliance, our remote support services provide direct expert input from our team, by the day, by project, or on an ongoing basis.
Personal Data Protection Compliance Checklist Template
A compliance checklist for reviewing your organisation's arrangements for managing and protecting personal data, against the data protection legislation listed on your legal register. Each requirement has space to record the arrangements in place and any actions required.
What's Included in this Checklist
- Personal Data and Processing Activities and Special Category and Criminal Offence Data
- Data Retention and Deletion and Policies and Transparency
- Data Protection Fee / DPO and Awareness / Training
- Privacy by Design and Data Protection Impact Assessment (DPIA)
- Use of AI and Automated Decisions
- Consent, Data Subject Access and Complaints
- Transfer of Personal Data, Data / Information Security and Data Breaches
- Website / email, with notes, comments and actions required
Who Needs a Data Protection Compliance Checklist?
Any organisation that wants to check its data protection arrangements periodically, before an audit, or after a change such as introducing AI tools or new software.
Included in the GDPR / Data Protection Toolkit
This form is part of the GDPR / Data Protection Toolkit - the registers, forms, policies, procedure and guidance for documenting how you collect and process personal data, in one download.
Works with the Data Protection Audit Checklist
For an internal audit of the same ground, the A-C_P47 Data Protection Audit Checklist sets the questions out in the audit checklist format.
Using the Checklist
Work down each requirement, record the arrangements in place and the evidence for them, and note any actions required. Keep the completed checklist as the record of the review, and repeat it periodically or when arrangements change.
AI Use and Automated Decisions
Use of AI and automated decisions are requirements in their own right on the checklist, so the AI tools used with personal data, and any software that makes or supports decisions about people, are reviewed alongside everything else.
Following Up Actions
Record the actions arising in your issues and actions register so they are tracked to completion.
Related Documents
Other documents in the GDPR / Data Protection Toolkit that work alongside this one:
Evidence of Review
A completed checklist, dated and signed off, is a straightforward record that data protection arrangements have been reviewed, which is useful for management review and when customers or auditors ask.
Would you rather we prepared it for you?
Our Personal Data Register and Privacy Notice Preparation service works through the personal data your organisation holds with you, including the AI tools in use, and prepares the register and privacy notice so they describe what actually happens to that data.
Personal Data Register and Privacy Notice Preparation