Profile information Account settings
Sign up Sign in

Appropriate policy document (APD) checklist

Make it Legal™ Checklist

Here are a few important steps to take to finish your document

Read the document to make sure it meets your needs and that you’ve provided all of the necessary information about the data processing. Remember that, if you have any questions, you can Ask a lawyer for advice.

While not strictly necessary, it’s good practice for organisations to publish their finalised APDs to help them meet transparency and accountability obligations. Publishing APDs can increase trust in your organisation’s data processing practices and can improve individuals’ abilities to exercise their rights in relation to personal data. 

If the Information Commissioner’s Office (ICO) asks for a copy of your APD, it must be provided free of charge.

After an APD has been completed, it needs to be regularly reviewed to ensure that it remains relevant and to ensure that you continue to have a lawful basis (ie lawful ground) for processing. For more information, read Appropriate policy documents.

Your organisation should keep its original APD for the duration of the processing and for at least 6 months after the processing has stopped. Note that this period may be longer, depending on your business’ needs.

A copy of your APD will also be stored under ‘My Documents’ in your Rocket Lawyer account.

Ask a lawyer

Get quick legal advice

Rocket Lawyer On Call™ Solicitors

Characters remaining: 600

Please reduce the size of your message to 600 characters.

Get your answer