This pack contains all the legal documents within the General Data Protection Regulation (GDPR) category on this website. It does not include the cyber security documents, which can be purchased separately.
The data protection information notices are similar to the privacy policies. They fulfil the same basic function but with respect to other categories of data subject, such as subcontractors and supplier personnel.
The pack includes data processing agreements. These are designed to help data controllers and data processors to ensure that their mutual contracts comply with the GDPR, and in particular with Article 28, which regulates the content of such contracts. It also includes a data sharing agreement, for controller-to-controller sharing.
A data retention policy template provides a sophisticated framework for defining the archiving, retention and deletion processes of an organisation.
NB this is not a comprehensive pack of GDPR documents. For example, it does not currently include data protection impact assessment forms or information security questionnaires.