Searching documents. These results are alphaZ document templates. If you are looking for guidance on a subject rather than a template, search the knowledge base.
Search alphaZ documents
Products meeting the search criteria
Data protection is simpler than it sounds once you know what personal data you hold. Start with the guidance, fill in one register, write the privacy notice from it, and use the rest of the toolkit as..
Nobody has a job title for most of this. Data protection, bribery, keeping information secure, the AI question, the records you are supposed to keep - it lands on whoever is already busiest. One short..
This form gives you a confidential personnel record of contact, payroll and emergency details, with retention tied to the personal data register, which is easy to evidence at audit.
Effective For..
When I audit personnel records, I want one place that tells me where each employee's data is held and what has been checked. This register is that overview, and it doubles as a data-protection retenti..
For data protection you have to know what personal data you hold, where it sits, who can see it and how it is protected. This matrix maps that out, and it is the first thing worth having when someone ..
Any supplier that handles personal data for you needs a written agreement, and that includes the AI services it uses. This form records what is processed, where, by whom and under what safeguards, wit..
A request about personal data can be for a copy, a correction, erasure or any of the other rights, and the clock starts once identity is confirmed. This form logs the type of request, the due date and..
When personal data is lost, sent to the wrong person or accessed without authority, the facts needed to decide whether to report it have to be gathered quickly. This form asks for them in the order yo..
Some processing needs thinking through before it starts, and AI tools and software that score, rank or filter people are high on that list. This assessment works through the need, the processing, cons..
A register row is fine for most processing, but a complex or higher risk activity deserves a full description. This form gives one activity the space it needs, including any AI use and automated decis..
A quick way to check your data protection arrangements are in place, including how AI tools and automated decisions are handled.
Effective Form Templates
This form template is supplied in fully ..
A data protection policy template written to be shared openly, covering how personal data is protected, including where AI tools are used, and how people can use their rights.
Effective Policy Te..
A website privacy notice template covering what the website collects, cookies, third parties and AI, with a prompt to check the cookie wording against your own site before you publish.
Effective ..
A data retention policy template that sets out how retention periods are decided and that they apply to every copy, not only the live record.
Effective Policy Templates
This policy template is s..
A data breach policy template that sets out what counts as a breach, how it is reported and what happens next, including for anyone whose data is affected.
Effective Policy Templates
This policy..
A shared data responsibility model policy template for data held in the cloud, with a review before use, data protection assessment and a register of who is responsible for what.
Effective Policy..
This is the procedure that holds the data protection arrangements together. It covers retention, breaches and access requests in full, so the separate policies on those subjects become optional, and i..
A privacy notice is only as good as the register behind it. The personal data register (RoPA) should describe current personal data processing activities and the policy should share this information.
..