Policies

A Word policy for workplace cameras: where they may be used, who can view footage, and how long recordings are kept. Edit it for your sites and access-control tools. It is a starting document, not a surveillance-law opinion.

A Word BYOD policy for personal phones and laptops used at work. It covers enrollment, acceptable use, lost devices, and separating company data from personal data. Adapt it to your MDM stack before you roll the program out.

A Word privacy notice you can adapt for a website or service. It lists typical GDPR notice topics so you can fill in your own processing. Counsel should confirm lawful bases, recipients, and retention before you publish it.

A Word retention policy plus a schedule you fill with your own periods. It describes how to keep and then destroy data. Legal minimums and industry rules still have to be written in by you.

A Word data-protection policy covering roles, principles, and handling of personal data. Map it to your DPO or privacy lead. It is not a substitute for a DPIA or a processing contract.

A Word information-security policy that you align with your controls and GDPR security duties. Name your tools and owners. It does not implement those controls.

A Word worksheet for assessing a personal-data incident and recording next steps. Use it when something has already gone wrong. Supervisory-authority deadlines still depend on your facts.