Free privacy and security templates

A Word checklist of GDPR program tasks, from records of processing to incident handling. Use it to see what is still blank. Completing the list is not a certification and does not by itself prevent a fine.

A Word participation/consent form for research involving people. Describe the study in your own words. Ethics-board and sector rules are outside this file.

A Word policy for workplace cameras: where they may be used, who can view footage, and how long recordings are kept. Edit it for your sites and access-control tools. It is a starting document, not a surveillance-law opinion.

A Word form asking to use someone’s name or image on social channels. State the accounts and the duration. Platform terms and employment rules still sit with you.

A Word checklist of incident-response steps: contain, record, assess, and follow up. Keep it next to your register. Notification duties depend on the incident, not on ticking every box.

An Excel register of processing activities (ROPA-style). Add your systems, purposes, and retention periods. It does not inventory your estate for you.

A Word consent form for photos and video of people at events or in the workplace. Fill in the purpose and where images will appear. Separate employment or press rules may still apply.

A Word checklist to help you decide whether a DPIA is likely required. Answer the questions for the processing in front of you. A “yes” is a prompt to assess, not a completed DPIA.

An Excel log for personal-data incidents: what happened, who was affected, and what you did. Fill a row per incident. It is a record, not a notification to a regulator.

A Word form for staff to report a suspected incident internally. Route it to your privacy or security lead. It is not a filing with a supervisory authority.