Read the document to make sure it meets your needs and that you’ve provided all of the necessary information about the data processing. Remember that, if you have any questions, you can Ask a lawyer for advice.
Appropriate policy document (APD) checklist
Make it Legal™ Checklist
Here are a few important steps to take to finish your document
While not strictly necessary, it’s good practice for organisations to publish their finalised APDs to help them meet transparency and accountability obligations. Publishing APDs can increase trust in your organisation’s data processing practices and can improve individuals’ abilities to exercise their rights in relation to personal data.
If the Information Commissioner’s Office (ICO) asks for a copy of your APD, it must be provided free of charge.
After an APD has been completed, it needs to be regularly reviewed to ensure that it remains relevant and to ensure that you continue to have a lawful basis (ie lawful ground) for processing. For more information, read Appropriate policy documents.
Your organisation should keep its original APD for the duration of the processing and for at least 6 months after the processing has stopped. Note that this period may be longer, depending on your business’ needs.
A copy of your APD will also be stored under ‘My Documents’ in your Rocket Lawyer account.
