A register of templates used to document compliance with EU GDPR.

Template data protection policies and procedures detailing guidelines, roles and responsibilities on how the organization manages personal data protection.

Training and awareness policy detailing how GDPR awareness training is administered and managed within your organisation

A register that documents the goals of your GDPR training, learning outcomes, targets and how training will be delivered

Management policies on audit management detailing audit responsibilities with respect to compliance with data protection regulations

A list of your planned audit of your privacy and data protection practices with dates and auditor and whether internal or external

A detailed report on the audits performed internally showing a summary of your compliance with GDPR and data protection techniques

Privacy policies and procedures detailing guidelines, roles and responsibilities on how the organization manages the privacy of personal data held

A log or record that documents all of your business's data types and categories of processing activities involving personal data

Contains notification samples to be used when notifying subjects on data accuracy, changes to privacy policies and responses to subject access requests.

A policy document that clarifies what personal data should be stored or archived, where that should happen and for how long.

A list of personal data types processed along with information on how long to keep them and when to delete them.

A list of the technical measures and methods taken by your organisation to ensure the protection of personal data..

Policies and procedures that aims to enact protections and limit the distribution of personal data to only those with authorized access.

A log of local and international security standards certifications achieved by the organisation that compliment GDPR data protection controls.

A list or record of all personally identifiable data housed within your organization including categories, sources and storage.

A compendium of all information security and data protection related policies, procedures and guidelines approved and implemented within your organisation.

Consent management policies and procedures detailing guidelines, roles and responsibilities on how the organization manages personal data consent.

A register or log of all collection points or forms from which you collect personal data for processing and review to ensure compliance with GDPR.

A record or log of all personal data privacy notices displayed to and the corresponding consents received from data subjects.

The general structure of form fields to be used to collect personal data when interacting with data subjects with respects to rights.

The policy sets out how your organization seeks to enable data subjects to exercise their rights in accordance with the legislation.

This document is used to register all the requests that the company receives from the data subjects for the exercise of rights.

A collection of legal statements that disclose some or all of the ways a website gathers, uses, discloses, and manages cookies.

Provides information regarding the categories of personal data handled, the legal justification for processing personal data, and the data provided to third parties..

A document log where all the published notices are listed, together with basic information about each notice.

Document outlines the policies and procedures your organization will take when a data subject requests a copy of their personal data.

A log or record of all subject access requests received from data subjects in other to evidence the requests received and ensure timelines are met.

Management policies detailing guidelines, roles and responsibilities on how the organization manages personal data breaches.

A log of personal data breaches that have occurred in your organization showing your assessment and reports of the data breaches.

General guidelines and report template used to notify applicable stakeholders where a high risk personal data breach has occurred.

A document that clearly states the job requirements, job duties, job responsibilities, and skills required to perform the DPO role - and outlining the required experience.

Sample written agreement that describes the business relationship to be entered into by the DPO and your organization.

Legally signed agreement to be used as a guideline between your organisation and an external appointed data protection officer.

A matrix template which can be used to perform an assessment of a DPOs skills including verification of qualifications and credentials.

Policies that procedures on the assessment of the impact of envisaged operations on the protection of personal data.

A register of information that describes the risks associated with a project and assess their likelihood and impact.

Outlines the company's requirements in relation to dealings and interactions with third parties with respect to personal data processing.

An agreement between a data controller and a data processor that states the rights and obligations of each party concerning the protection of personal data.

Declaration request forms used to obtain signed self declarations from data processors and staff as it relates to data protection.

A log of self declaration from data processors or staff attesting to training and awareness on the organizations data protection policies.

A log of all contractors or third parties that support your organization with personal data processing.

A log of data processor contracts and agreement across all processing activities within your organization.

An agreement used to regulate the mutual relations between the parties as regards the joint control of Personal Data processing.

Management policies on backup management detailing how the organization schedules, takes backup and restores personal data.

Policies provide guidance on the organization's approach to ensuring that it embeds privacy by design and privacy by default across its personal data processing operations.

An IRM policy template that sets out the principles that an organization uses to identify, assess and manage information risk.

A log of information risks identified by the organization, the assessments and the responses taken mitigate such risks.

Details guidelines, roles and responsibilities on how the organization manages personal data related complaints.

A list of your personal data processing jurisdiction and their respective supervisory authorities as it relates to your operations.

A log of the status and details of personal data complaints from data subjects received by your organization.

A document that clearly states the job requirements, job duties, job responsibilities, and skills required to perform the Representative role - and outlining the required experience.

Legally signed agreement to be used as a guideline between your organisation and a nominated GDPR representative.

A list of all operational jurisditions and assessment on the requirement for a data protection representative.