GDPR Documentation Report

Reporting Individual (First, Last Name)

Reporting Individual's Email

Reporting Individual's Address

Reporting Individual's Telephone

Data Protection Officer (First, Last Name) - if applicable

Data Protection Officer's Email - if applicable

Data Protection Officer's Address - if applicable

Data Protection Officer's Telephone - if applicable

Representative (First, Last Name) - if applicable

Representative's Email - if applicable

Representative's Address - if applicable

Representative's Telephone - if applicable

Business Function - Article 30 Record of Processing Activities

Purpose of Processing - Article 30 Record of Processing Activities

Name and Contact Details of Joint Controller - Article 30 Record of Processing Activities

Categories of Individuals - Article 30 Record of Processing Activities

Categories of Recipients - Article 30 Record of Processing Activities

Link to Contract with Processor - Article 30 Record of Processing Activities

Names of Third Countries or International Organisations That Personal Data Are Transferred To (if applicable) - Article 30 Record of Processing Activities

Safeguards for Exceptional Transfers of Personal Data to Third Countries or International Organisations (if applicable) - Article 30 Record of Processing Activities

Retention Schedule (if applicable) - Article 30 Record of Processing Activities

General Description of Technical and Organisational Security Measures (if possible) - Article 30 Record of Processing Activities

Article 6 lawful basis for processing personal data - Privacy Notices

Article 9 condition for processing special category data - Privacy Notices

Legitimate interests for the processing (if applicable) - Privacy Notices

Link to record of legitimate interests assessment (if applicable) - Privacy Notices

Rights available to individuals - Privacy Notices

Existence of automated decision-making, including profiling (if applicable) - Privacy Notices

The source of the personal data (if applicable) - Privacy Notices

Link to Record of Consent - CONSENT

Location of Personal Data - Access Requests

Protection Impact Assessment Required? - Data Protection Impact Assessments

Data Protection Impact Assessment progress - Data Protection Impact Assessments

Link to Data Protection Impact Assessment - Data Protection Impact Assessments

Has a personal data breach occurred? - Personal Data Breaches

Link to Record of Personal Data Breach - Personal Data Breaches

Data Protection Act 2018 Schedule 1 Condition for processing - Data Protection Act 2018 - Special Category or Criminal Conviction and Offence data

GDPR Article 6 lawful basis for processing - Data Protection Act 2018 - Special Category or Criminal Conviction and Offence data

Link to retention and erasure policy document - Data Protection Act 2018 - Special Category or Criminal Conviction and Offence data

Is personal data retained and erased in accordance with the policy document? - Data Protection Act 2018 - Special Category or Criminal Conviction and Offence data

Reasons for not adhering to policy document (if applicable) - Data Protection Act 2018 - Special Category or Criminal Conviction and Offence data

GDPR Documentation Report – Authorized Individuals Only

GDPR Documentation Report