Read the document to make sure it meets your needs and that you’ve provided all of the necessary information about the data processing. Remember that, if you have any questions, you can Ask a lawyer for advice.
While not strictly necessary, it’s good practice for organisations to publish their finalised APDs to help them meet transparency and accountability obligations. Publishing APDs can increase trust in your organisation’s data processing practices and can improve individuals’ abilities to exercise their rights in relation to personal data.
If the Information Commissioner’s Office (ICO) asks for a copy of your APD, it must be provided free of charge.
Your organisation should keep its original APD for the duration of the processing and for at least 6 months after the processing has stopped. Note that this period may be longer, depending on your business’ needs.
A copy of your APD will also be stored under ‘My Documents’ in your Rocket Lawyer account.