Domain
Privacy
This directory contains privacy governance artefacts covering data protection policy, privacy impact assessment, cross-border transfer governance, privacy management programme accountability, and data subject rights.
Note
Its original content is released under CC BY-SA 4.0; a quotation that NOTICE.md (opens in a new tab) allows or keeps under its transition clause keeps its source licence and is not relicensed under CC BY-SA 4.0.
Charter, 1
Charters
Policy, 1
Policies
Framework, 3
Frameworks
- Children's Data Frameworkv1.0.14
- Consent Management Frameworkv1.0.17
- Privacy by Design Frameworkv1.0.4
Standard, 3
Standards
Procedure, 4
Procedures
Register, 3
Registers
Template, 10
Templates
- Breach Notification Regulator Register Templatev1.0.6
- Data Processing Agreement Template (GDPR Article 28)v1.0.4
- Data Subject Access Request Workflow Templatev1.1.16
- DPIA (Data Protection Impact Assessment) Templatev1.0.14
- Employee Monitoring Notice Templatev0.1.1
- Joint Controller Arrangement Templatev1.0.14
- Legitimate Interest Assessment (LIA) Templatev1.0.4
- Privacy Notice Templatev1.1.5
- Record of Processing Activities Templatev1.0.13
- Transfer Impact Assessment (TIA) Templatev1.0.3
Annex, 32
Annexes
- Australia Privacy Regulatory Requirementsv1.0.8
- Brazil Privacy Regulatory Requirementsv1.1.13
- Canada Privacy Regulatory Requirementsv1.1.33
- Chile Privacy Regulatory Requirementsv0.0.1
- China Privacy Regulatory Requirementsv1.1.18
- Colombia Privacy Regulatory Requirementsv0.0.2
- Ecuador Privacy Regulatory Requirementsv0.0.5
- European Union Privacy Regulatory Requirementsv1.1.26
- India Privacy Regulatory Requirementsv1.1.8
- Indonesia Privacy Regulatory Requirementsv1.0.12
- Japan Privacy Regulatory Requirementsv1.1.10
- Kenya Privacy Regulatory Requirementsv1.1.1
- Latin America Privacy Regulatory Requirementsv1.0.17
- Legitimate Interest Assessment for Employment Monitoring Annexv0.1.4
- Malaysia Privacy Regulatory Requirementsv1.2.5
- Mexico Privacy Regulatory Requirementsv0.0.4
- New Zealand Privacy Regulatory Requirementsv1.1.7
- Nigeria Privacy Regulatory Requirementsv1.0.9
- Peru Privacy Regulatory Requirementsv0.0.3
- Philippines Privacy Regulatory Requirementsv1.0.6
- Privacy Jurisdiction Indexv1.0.66
- Saudi Arabia Privacy Regulatory Requirementsv1.0.10
- Singapore Privacy Regulatory Requirementsv1.1.6
- South Africa Privacy Regulatory Requirementsv1.1.1
- South Korea Privacy Regulatory Requirementsv1.1.7
- Switzerland Privacy Regulatory Requirementsv1.0.13
- Thailand Privacy Regulatory Requirementsv1.1.5
- Turkey Privacy Regulatory Requirementsv1.0.12
- United Arab Emirates Privacy Regulatory Requirementsv1.0.10
- United Kingdom Privacy Regulatory Requirementsv1.1.19
- United States Privacy Regulatory Requirementsv1.2.14
- Vietnam Privacy Regulatory Requirementsv1.2.4
Leadership, 5
Leadership pages for this area
Pages from the executive layer that tag this area. They explain and advise; the documents above govern.
- What the governing body should require for AI data governance and classificationexecutive brief
- From retention rule to destruction evidence: the governed journey of a recordjourney
- What the governing body should ask about the organization's privacy, data protection, cross-border transfers, and breach responseoversight question set
- What happens when a critical AI supplier failsscenario
- When a customer-data service must move after its legal operating boundary changesscenario
Next on the tour
Open a domain: Governance