|
Document Reference |
Tittle |
Pages |
|
CERTIKIT GDPR Toolkit Guidance |
|
-
|
DOWNLOADABLE List of Documents in the Toolkit |
2 pages |
|
-
|
CERTIKIT - GDPR Implementation Guide |
26 pages |
|
-
|
CERTIKIT - Standard Licence Terms |
6 pages |
|
-
|
CERTIKIT GDPR Toolkit V4 Completion Instructions |
4 pages |
|
-
|
CERTIKIT GDPR Toolkit Version 4 Release Notes |
1 tab |
|
- |
EU General Data Protection Regulation 2016 |
88 pages |
|
GDPR Preparation Project |
|
GDPR-DOC-01-1 |
GDPR Compliance Project Initiation Document |
20 pages |
|
GDPR-DOC-01-2 |
GDPR Preparation Project Plan (Microsoft Project format) |
1 plan |
|
GDPR-DOC-01-3 |
GDPR Preparation Project Plan (Microsoft Excel format) |
2 tabs |
|
GDPR-DOC-01-4 |
GDPR Documentation Log |
2 tabs |
|
GDPR-DOC-01-5 |
GDPR Briefing Presentation |
15 slides |
|
GDPR-DOC-01-6 |
Executive Support Letter |
4 pages |
|
GDPR-FORM-01-1 |
Compliance Evidence |
2 tabs |
|
GDPR-FORM-01-2 |
Meeting Minutes |
1 page |
|
GDPR-FORM-01-3 |
GDPR Gap Assessment Tool |
6 tabs |
|
GDPR Roles, Awareness and Training |
|
GDPR-DOC-02-1 |
GDPR Roles and Responsibilities |
14 pages |
|
GDPR-DOC-02-2 |
GDPR Competence Development Procedure |
16 pages |
|
GDPR-DOC-02-3 |
GDPR Communication Programme |
13 pages |
|
GDPR-DOC-02-4 |
Information Security Awareness Training |
24 slides |
|
GDPR-DOC-02-5 |
GDPR Awareness Training Presentation |
17 slides |
|
GDPR-FORM-02-1 |
GDPR Competence Development Questionnaire |
3 tabs |
|
-
|
EXAMPLE GDPR Competence Development Questionnaire |
3 tabs |
|
Personal Data Analysis |
|
GDPR-DOC-03-1 |
Personal Data Analysis Procedure |
10 pages |
|
GDPR-DOC-03-2 |
Legitimate Interest Assessment Procedure |
12 pages |
|
GDPR-FORM-03-1 |
Records of Processing Activities |
3 tabs |
|
GDPR-FORM-03-2 |
Personal Data Analysis Form |
4 tabs |
|
GDPR-FORM-03-3 |
Personal Data Analysis Diagram - VISIO |
2 pages |
|
GDPR-FORM-03-4 |
Personal Data - Initial Questionnaire |
2 pages |
|
GDPR-FORM-03-5 |
Legitimate Interest Assessment Form |
5 pages |
|
-
|
VISIO - EXAMPLE Personal Data Analysis Diagram |
3 pages |
|
-
|
EXAMPLE Personal Data Analysis Form |
4 tabs |
|
Privacy Policy and Notices |
|
GDPR-DOC-04-1 |
Records Retention and Protection Policy |
12 pages |
|
GDPR-DOC-04-2 |
Data Protection Policy |
14 pages |
|
GDPR-DOC-04-3 |
Privacy Notice Procedure |
12 pages |
|
GDPR-DOC-04-4 |
Website Privacy Policy |
9 pages |
|
GDPR-FORM-04-1 |
Privacy Notice Planning Form - Data Subject |
3 pages |
|
GDPR-FORM-04-2 |
Consent Request Form |
2 pages |
|
GDPR-FORM-04-3 |
Privacy Notice Planning Form - Other Source |
3 pages |
|
-
|
EXAMPLE Consent Request Form |
2 pages |
|
-
|
EXAMPLE Privacy Notice - Employment |
4 pages |
|
-
|
EXAMPLE Privacy Notice - Newsletter Signup |
2 pages |
|
-
|
EXAMPLE Privacy Notice - Online Purchase |
2 pages |
|
-
|
EXAMPLE Privacy Notice - Website Enquiry |
2 pages |
|
-
|
EXAMPLE Website Privacy Policy |
6 pages |
|
Rights of the Data Subject |
|
GDPR-DOC-05-1 |
Data Subject Request Procedure |
16 pages |
|
GDPR-DOC-05-2 |
Data Subject Request Register |
3 tabs |
|
GDPR-FORM-05-1 |
Data Subject Request Form |
2 pages |
|
Controllers and Processors |
|
GDPR-DOC-06-1 |
GDPR Controller-Processor Agreement Policy |
11 pages |
|
GDPR-DOC-06-2 |
Supplier GDPR Assessment Procedure |
10 pages |
|
GDPR-DOC-06-3 |
Processor Security Controls |
13 pages |
|
GDPR-DOC-06-4 |
GDPR Readiness Statement |
5 pages |
|
GDPR-DOC-06-5 |
GDPR Letter to Processors |
5 pages |
|
GDPR-FORM-06-1 |
GDPR Contract Review Tool |
3 tabs |
|
GDPR-FORM-06-2 |
Supplier GDPR Assessment |
2 pages |
|
GDPR-FORM-06-3 |
Processor Employee Confidentiality Agreement |
10 pages |
|
GDPR-FORM-06-4 |
GDPR Readiness Checklist |
6 pages |
|
GDPR-FORM-06-5 |
Data Processing Agreement |
11 pages |
|
Data Protection Impact Assessment |
|
GDPR-DOC-07-1 |
Data Protection Impact Assessment Process |
22 pages |
|
GDPR-DOC-07-2 |
Data Protection Impact Assessment Report |
14 pages |
|
GDPR-FORM-07-1 |
Data Protection Impact Assessment Tool |
6 tabs |
|
GDPR-FORM-07-2 |
Data Protection Impact Assessment Questionnaire |
4 pages |
|
International Transfers |
|
GDPR-DOC-08-1 |
Procedure for International Transfers of Personal Data |
12 pages |
|
Personal Data Breach Management |
|
GDPR-DOC-09-1 |
Information Security Incident Response Procedure |
25 pages |
|
GDPR-DOC-09-2 |
Personal Data Breach Notification Procedure |
12 pages |
|
GDPR-DOC-09-3 |
Personal Data Breach Register |
2 tabs |
|
GDPR-FORM-09-1 |
Personal Data Breach Notification Form |
4 pages |
|
GDPR-FORM-09-2 |
Breach Notification Letter to Data Subjects |
4 pages |
|
-
|
EXAMPLE Personal Data Breach Notification Form |
4 pages |
|
Information Security Policies |
|
GDPR-DOC-10-1 |
Information Security Policy |
13 pages |
|
GDPR-DOC-10-2 |
Mobile Device Policy |
12 pages |
|
GDPR-DOC-10-3 |
Access Control Policy |
15 pages |
|
GDPR-DOC-10-4 |
Cryptographic Policy |
12 pages |
|
GDPR-DOC-10-5 |
Physical Security Policy |
11 pages |
|
GDPR-DOC-10-6 |
Anti-Malware Policy |
13 pages |
|
GDPR-DOC-10-7 |
Network Security Policy |
15 pages |
|
GDPR-DOC-10-8 |
Electronic Messaging Policy |
12 pages |
|
GDPR-DOC-10-9 |
Cloud Computing Policy |
10 pages |
|
GDPR-DOC-10-10 |
Acceptable Use Policy |
10 pages |