Data protection

New and updated

• Type:

  Editor's choice

  General Data Protection Regulation: resource round-up

  The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 place strict duties on employers in relation to the processing of personal data.

• Type:

  Letters and forms

  Data protection impact assessment form

  A model form to conduct a data protection impact assessment for potentially high-risk data processing. The form, which complies with the General Data Protection Regulation (GDPR), uses the example of an impact assessment when an employer is proposing to introduce CCTV monitoring in a particular location.

• Type:

  Letters and forms

  Contractor privacy notice

  A model privacy notice to give contractors information about how their personal data will be used, in compliance with the General Data Protection Regulation (GDPR).

• Type:

  Letters and forms

  Worker privacy notice

  A model privacy notice to give workers information about how their personal data will be used, in compliance with the General Data Protection Regulation (GDPR).

• Type:

  Letters and forms

  Form for individual to request rectification of incorrect or incomplete personal data

  A model form to allow an individual to request the rectification of incorrect or incomplete data about them. The form complies with the General Data Protection Regulation (GDPR).

• Type:

  Letters and forms

  Letter informing individual that incorrect or incomplete personal data has been rectified

  A model letter to inform an individual that incorrect or incomplete data about them has been rectified, in compliance with the General Data Protection Regulation (GDPR).

• Type:

  Letters and forms

  Letter asking for more information on request for rectification of incorrect or incomplete personal data

  A model letter for your organisation to ask for more information from an individual who has requested the rectification of incorrect or incomplete data about them.

• Type:

  Letters and forms

  Letter extending time to respond to request for rectification of incorrect or incomplete personal data

  A model letter to extend the time limit for responding to an individual's request for the rectification of incorrect or incomplete data about them. The letter complies with the General Data Protection Regulation (GDPR).

• Type:

  Letters and forms

  Form for individual to request erasure of personal data

  A model form to allow an individual to request the deletion of data about them, in compliance with the General Data Protection Regulation (GDPR).

• Type:

  Letters and forms

  Letter informing individual that personal data has been erased

  A model letter to inform an individual that data about them has been deleted, in compliance with the General Data Protection Regulation (GDPR).