Documents · Free download
Free Data Protection (GDPR) Policy (UK)
An internal, staff-facing data protection policy template for UK businesses, covering how your people should handle personal data and how the business meets its duties under the UK GDPR and the Data Protection Act 2018. It runs through the data protection principles, lawful basis, individual rights, what to do about a personal data breach, and the responsibilities that sit with everyone who handles data. It is distinct from your public privacy notice: the privacy notice tells the outside world what you do with their data, while this policy tells your staff how to do it properly. Fill the highlighted boxes, then adjust the wording to fit your business. It is a starting point rather than legal advice, so review it before you rely on it. Free to download in editable Word and read-only PDF.
What's included
- The UK GDPR data protection principles, in plain terms
- Lawful basis and individual rights
- What to do about a personal data breach
- Staff responsibilities, and a document control panel to complete
How to use it
- Fill the highlighted boxes in the document control panel.
- Adjust the wording to fit how your business handles data.
- Adopt it and brief your staff; keep it separate from your privacy notice.
Free and provided as-is. It is a head start, not professional advice, so always check anything you rely on is correct for your own situation. See the resource terms.