A model policy to set out your organisation's approach to HR-related data protection. The policy is compliant with the UK General Data Protection Regulation (UK GDPR).
A model register to keep a record of subject access requests from employees and other individuals. The letter complies with the General Data Protection Regulation (GDPR).