Template D: Process according to data protection principles To process personal data in accordance with data protection principles you must have suitable policies in place. The policies supporting the IG Toolkit 2017/18 are listed at the end of this workbook and you may have many of these already. These will be added to or amended by (the templates in) this booklet and the other guidance documents (Part 1 and 2). Following the data protection principles involves for example: Principle Issues to consider Lawfully All your processing is lawful templates C and F – Also, responsibilities, DPO, action plan, ICO fee and sign off – templates A and B Fairly and A privacy notice is provided, any objections to processing are transparent considered and data breaches with appropriately see – templates G, I, J and K Also, processors’ contracts are appropriate see template E – Adequate, relevant Personal data available only to those who need to see it for the and limited for the work they do privacy by design and default apply and Data – purposes Protection Impact Assessments are carried out if required see – templates L and M Also, processors’ contracts are appropriate see template E – Accurate/up to date Records are accurate and, if relevant, up to date see template H – (Data Quality) Form in which Pseudonymisation/redaction of personal details, has been identification kept considered, as appropriate consider privacy by design and – for no longer than default see template L – necessary Security is appropriate physical, electronic and human security see – template H Integrity Data is backed up so that it is protected against accidental loss or damage see template H – Template E: Review and check with your processors
Template D: Process according to data protection principles To process personal data in accordance with data protection principles you must have suitable policies in place. The policies supporting the IG Toolkit 2017/18 are listed at the end of this workbook and you may have many of these already. These will be added to or amended by (the templates in) this booklet and the other guidance documents (Part 1 and 2). Following the data protection principles involves for example: Principle Issues to consider Lawfully All your processing is lawful – templates C and F Also, responsibilities, DPO, action plan, ICO fee and sign off – templates A and B Fairly and transparent A privacy notice is provided, any objections to processing are considered and data breaches with appropriately – see templates G, I, J and K Also, processors’ contracts are appropriate – see template E Adequate, relevant and limited for the purposes Personal data available only to those who need to see it for the work they do – privacy by design and default apply and Data Protection Impact Assessments are carried out if required – see templates L and M Also, processors’ contracts are appropriate – see template E Accurate/up to date Records are accurate and, if relevant, up to date – see template H (Data Quality) Form in which identification kept for no longer than necessary Pseudonymisation/redaction of personal details, has been considered, as appropriate – consider privacy by design and default – see template L Security is appropriate physical, electronic and human security – see template H Integrity Data is backed up so that it is protected against accidental loss or damage – see template H Template E: Review and check with your processors