GDPR Data Protection Policy Template

Data protection policies under the GDPR

The GDPR states that “Where proportionate in relation to processing activities, [measures] shall include the implementation of appropriate data protection policies by the controller.”

Policies are high-level documents that define principles, rather than detailing how, what and when things should be done.

Policies must be:

• Capable of implementation;
• Enforceable; and
• Concise and easy to understand.

A data protection policy also needs to balance protection against productivity.

If you are not sure how to create a policy that can achieve all this, our customisable GDPR Data Protection Policy Template can help.

Easily create your GDPR data protection policy using this customisable template

Clear and effective policies are a key part of GDPR compliance.

If you are unsure what elements your data protection policy should include or where to start, this template can help you create one in minutes, enabling you to fulfil your Article 24 obligations.

To complete the template, fill in the customisable areas with your organisation’s procedures, detail how you process data under the GDPR, and assign roles to specific tasks.

Please note that this template is not an out-of-the-box solution and you will need to add details that match what your organisation does and what it should be doing. See our FAQ for more information.

Need more GDPR documentation templates?

If you are looking for further templates and guidance to accelerate your GDPR compliance project, our GDPR Toolkit contains a comprehensive set of easy-to-use and customisable documentation.

Alternatively, you can purchase more individual GDPR templates here.

Technical information

• The GDPR Data Protection Policy is available for immediate download. After purchasing, you will receive an email with a download link.
• The GDPR Data Protection Policy is suitable for organisations of all sizes and types in any location.
• If the template is updated within 12 months of your purchase, we will send you the newest version for free.
• Updates resulting from new data protection legislation are not included.
• The GDPR Data Protection Policy is designed for all business types and is easily customisable in Microsoft Word.

For more information, read our FAQ.