GDPR Toolkit

A self-assessment tool for charitable organisations.

This guidance is to be used by the recipient only and should not be passed to third parties without our consent.

This toolkit contains:

1. UK GDPR compliance: checklist for third sector organisations
2. The Lawful Bases for Processing Personal Data under the UK General Data Protection Regulation (UK GDPR): Guidance Note
3. GDPR – Privacy Notice Guidance Note
4. Sample GDPR policy on use of own devices by Trustees and Volunteers
5. Sample Data Protection Policy
6. Data Retention: Guidelines for retention of HR Data
7. Sample Policy: Data Retention: Guidelines for retention of HR Data
8. Data Protection Impact Assessment