GDPR Toolkit Version 3 List of Documents Area 0 CERTIKIT GDPR Toolkit Guidance
Document Reference None None
Document CERTIKIT - A Guide to Preparing for the GDPR CERTIKIT GDPR Toolkit Completion Instructions
1 GDPR Preparation Project
GDPR-DOC-01-1 GDPR-DOC-01-2 GDPR-DOC-01-3 GDPR-DOC-01-4 GDPR-DOC-01-5 GDPR-DOC-01-6 GDPR-FORM-01-1 GDPR-FORM-01-2 GDPR-FORM-01-3
GDPR Compliance Project Initiation Document GDPR Preparation Project Plan (Microsoft Project) GDPR Preparation Project Plan (Microsoft Excel) GDPR Documentation Log GDPR Briefing Presentation Executive Support Letter GDPR Compliance Evidence Meeting Minutes GDPR Gap Assessment Tool
2 GDPR Roles Awareness and Training
GDPR-DOC-02-1 GDPR-DOC-02-2 GDPR-DOC-02-3 GDPR-DOC-02-4 GDPR-FORM-02-1 None
GDPR Roles and Responsibilities GDPR Competence Development Procedure GDPR Communication Programme Information Security Awareness Training GDPR Competence Development Questionnaire EXAMPLE GDPR Competence Development Questionnaire
3 Personal Data Mapping
GDPR-DOC-03-1 GDPR-DOC-03-2 GDPR-DOC-03-3 GDPR-FORM-03-1 GDPR-FORM-03-2
Organization-wide Personal Data Inventory Personal Data Mapping Procedure Legitimate Interest Assessment Procedure Records of Processing Activities Personal Data Flow Mapping Tool
GDPR-FORM-03-3 GDPR-FORM-03-4 GDPR-FORM-03-5 GDPR-FORM-03-6 None None None
Personal Data Capture Form Personal Data Mapping Diagram Personal Data - Initial Questionnaire Legitimate Interest Assessment Form EXAMPLE Personal Data Flow Diagram EXAMPLE Personal Data Capture Form EXAMPLE Personal Data Mapping Diagram
4 Privacy Policy and Notices
GDPR-DOC-04-1 GDPR-DOC-04-2 GDPR-DOC-04-3 GDPR-FORM-04-1 GDPR-FORM-04-2 None None None
Records Retention and Protection Policy Privacy and Personal Data Protection Policy Privacy Notice Procedure Privacy Notice Planning Form Consent Request Form EXAMPLE Privacy Notice - Newsletter Signup EXAMPLE Privacy Notice - Online Purchase EXAMPLE Consent Request Form
5 Rights of the Data Subject
GDPR-DOC-05-1 GDPR-DOC-05-2 GDPR-FORM-05-1
Data Subject Request Procedure Data Subject Request Register Data Subject Request Form
6 Controllers and Processors
GDPR-DOC-06-1 GDPR-DOC-06-2 GDPR-DOC-06-3 GDPR-FORM-06-1 GDPR-FORM-06-2 GDPR-FORM-06-3
GDPR Controller/Processor Agreement Policy Supplier GDPR Assessment Procedure Processor Security Controls GDPR Contract Review Tool Supplier GDPR Assessment Processor Employee Confidentiality Agreement
7 Data Protection Impact Assessment
GDPR-DOC-07-1 GDPR-DOC-07-2 GDPR-FORM-07-1 GDPR-FORM-07-2
Data Protection Impact Assessment Process Data Protection Impact Assessment Report Data Protection Impact Assessment Tool Data Protection Impact Assessment Questionnaire
8 International Transfers
GDPR-DOC-08-1
Procedure for International Transfers of Personal Data
9 Personal Data Breach Management
GDPR-DOC-09-1 GDPR-DOC-09-2 GDPR-DOC-09-3 GDPR-FORM-09-1 None
Information Security Incident Response Procedure Personal Data Breach Notification Procedure Personal Data Breach Register Personal Data Breach Notification Form EXAMPLE Personal Data Breach Notification Form