Data Protection Toolkit - Templates
Under Article 30 it is a legal requirement that you keep records of your processing activities, and provide them to the regulator on request if necessary.
There are certain things that you need to capture and keep a written electronic record of. This guidance and template will help you to get started.
A privacy notice gives individuals important information about their data and how you use it.
Your approach to should provide clear and plain information. A privacy notice is a common way to do this. This checklist makes sure you cover all the required information.
Legitimate interests is one of six lawful bases set out in the GDPR to justify the processing of personal data and might provide an alternative to seeking consent in many cases.
If you're relying on legitimate interests, it's important that you balance your interests against the interests, rights and freedoms of the data subject, and that you keep clear records of this. This template form asks a series of questions that you can ask yourself to decide if you can use this lawful basis.