Data Protection Toolkit - Templates

14 May 2018 Bob Harper    Last updated: 15 May 2018

We've created some templates and resources as a starting point for you to work with.

Document your processing activities

Under Article 30 it is a legal requirement that you keep records of your processing activities, and provide them to the regulator on request if necessary.

There are certain things that you need to capture and keep a written electronic record of. This guidance and template will help you to get started.

Write a privacy notice

A privacy notice gives individuals important information about their data and how you use it.

Your approach to should provide clear and plain information. A privacy notice is a common way to do this. This checklist makes sure you cover all the required information.

Carry out a Legitimate Interests Assessment

Legitimate interests is one of six lawful bases set out in the GDPR to justify the processing of personal data and might provide an alternative to seeking consent in many cases.

If you're relying on legitimate interests, it's important that you balance your interests against the interests, rights and freedoms of the data subject, and that you keep clear records of this. This template form asks a series of questions that you can ask yourself to decide if you can use this lawful basis.

Every effort is made to ensure that the contents of this document are accurate, but the advice given should not be relied on as a definitive legal statement.
by Bob Harper

Data Development Coordinator

[email protected]

Not a NICVA member yet?

Save time, money and energy: Join NICVA and you’ll be connecting in to a strong network of local organisations focused on voluntary and community activity.

Join Us

NICVA now welcomes all small groups for free.