Read the appropriate policy document (APD) to make sure it meets your needs. Remember that if you have any questions you can easily Ask a lawyer.
While not necessary, it is considered to be good practice to publish finalised APDs to abide by transparency and accountability obligations. Doing this can increase trust in your organisation’s data processing activities and facilitate and improve individuals’ ability to exercise their rights in relation to personal data.
If the Information Commissioner’s Office (ICO) asks for a copy of your APD, it must be provided free of charge.
After an APD has been completed, it needs to be kept under regular review, to ensure that it continues to remain relevant and so that you continue to have a lawful basis for processing. For more information, read Appropriate policy documents.
Your organisation should keep the original APD for the duration of the processing and for at least 6 months after the processing has stopped. Note that this period may be longer depending on your business needs.
A copy of the APD will also be stored under ‘My Documents’ in your Rocket Lawyer account.