Professional Documents
Culture Documents
GDPR Documentation Controller Template
GDPR Documentation Controller Template
Name
Address
Email
Telephone
Article 9 condition for processing special Legitimate interests for the processing (if
category data applicable)
Privacy Notices
Link to Data Protection Impact Assessment Has a personal data breach occurred?
Personal Data Breaches Data Prot
Is personal data retained and erased in Reasons for not adhering to policy
accordance with the policy document? document (if applicable)
Name and contact details
Name Example controller
Address Street, city, postcode
Email Email address
Telephone Tel. number
Finance Payroll
Finance Payroll
Finance Payroll
Finance Payroll
Human Resources Personnel file
Human Resources Personnel file
Human Resources Personnel file
Human Resources Personnel file
Human Resources Personnel file
Human Resources Recruitment
Human Resources Recruitment
Human Resources Recruitment
Human Resources Recruitment
Human Resources Recruitment
Human Resources Recruitment
Human Resources Recruitment
Human Resources Recruitment
Human Resources Recruitment
Human Resources Recruitment
N/A Employees
N/A Employees
N/A Employees
N/A Employees
N/A Employees
N/A Employees
N/A Employees
N/A Employees
N/A Employees
N/A Successful candidates
N/A Successful candidates
N/A Successful candidates
N/A Successful candidates
N/A Successful candidates
N/A Unsuccessful candidates
N/A Unsuccessful candidates
N/A Unsuccessful candidates
N/A Unsuccessful candidates
N/A Unsuccessful candidates
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
Link N/A
Link N/A
Link N/A
Link N/A
Safeguards for exceptional transfers of
personal data to third countries or Retention schedule (if possible)
international organisations (if applicable)
Article 9 condition for processing special Legitimate interests for the processing (if
category data applicable)
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
Article 9(2)(b) - employment N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
Article 9(2)(b) - employment N/A
Article 9(2)(b) - employment N/A
N/A N/A
N/A N/A
N/A N/A
Article 9(2)(b) - employment N/A
Article 9(2)(b) - employment N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
Privacy Notices
No Data subject
No Data subject
No Controller
No Controller
No Data subject
No Controller
No Controller
No Controller
No Controller
Yes Data subject
Yes Data subject
Yes Data subject
No Data subject
No Data subject
Yes Data subject
Yes Data subject
Yes Data subject
No Data subject
No Data subject
No N/A
No N/A
No N/A
No N/A
No N/A
No N/A
No N/A
No N/A
No N/A
Yes Completed
Yes Completed
Yes Completed
No N/A
No N/A
Yes Completed
Yes Completed
Yes Completed
No N/A
No N/A
Yes Completed
Yes Completed
Yes Completed
Yes Completed
ssments Personal Data Breaches
Link to Data Protection Impact Assessment Has a personal data breach occurred?
N/A No
N/A No
N/A No
N/A No
N/A No
N/A No
N/A No
N/A No
N/A No
Link No
Link No
Link No
N/A No
N/A No
Link No
Link No
Link No
N/A No
N/A No
Link No
Link No
Link No
Link No
Personal Data Breaches Data Protecti
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A Sch.1, Pt.1, 1 - Employment
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A Sch.1, Pt.1, 1 - Employment
N/A Sch.1, Pt.1, 1 - Employment
N/A N/A
N/A N/A
N/A N/A
N/A Sch.1, Pt.1, 1 - Employment
N/A Sch.1, Pt.1, 1 - Employment
N/A N/A
N/A N/A
N/A N/A
N/A N/A
Data Protection Act 2018 - Special Category or Criminal Conviction and Offence data
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
Article 6(1)(b) - contract Link
N/A N/A
N/A N/A
N/A N/A
N/A N/A
Article 6(1)(b) - contract Link
Article 6(1)(b) - contract Link
N/A N/A
N/A N/A
N/A N/A
Article 6(1)(b) - contract Link
Article 6(1)(b) - contract Link
N/A N/A
N/A N/A
N/A N/A
N/A N/A
nal Conviction and Offence data
Is personal data retained and erased in Reasons for not adhering to policy
accordance with the policy document? document (if applicable)
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
Yes N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
Yes N/A
Yes N/A
N/A N/A
N/A N/A
N/A N/A
Yes N/A
Yes N/A
N/A N/A
N/A N/A
N/A N/A
N/A N/A
Notes
Use this template to document the processing activities you undertake
as a controller.
1. Complete your organisation’s name and contact details in cells B3-B6.
2. Complete your data protection officer’s name and contact details (if
applicable) in cells D3-D6.
3. Complete your representative’s name and contact details (if
applicable) in cells F3-F6.