Do I Need a Data Protection Officer (DPO)?
A simple self-assessment guide to help organisations determine whether they may be required to appoint a Data Protection Officer under UK...
Record of Processing Activities (ROPA) – Processor Template
An ICO spreadsheet template for organisations processing personal data on behalf of others. Record processing activities, controller rela...
Record of Processing Activities (ROPA) – Controller Template
An ICO spreadsheet template for organisations acting as a data controller. Document your processing activities, lawful bases, data catego...
Data Protection Impact Assessment (DPIA) Template
A practical ICO template designed to help organisations assess and document privacy risks before introducing new systems, services, or pr...
Frequently Asked Questions
1. What is a DPIA? A Data Protection Impact Assessment (DPIA) is a formal risk assessment required under the UK GDPR for processing activ...