Key description
- This is a policy to be used in an organisation internally. Many banks and businesses require this policy to be implemented. Althought U.S. jurisdiction is indicated, it is drafted in a genera
Language
Categories
Industries
Covered clausesGeneral
-
Interpretation
-
Introduction
-
Scope
-
Personal data protection principles
-
Lawfulness, fairness, transparency
-
Consent
-
Transparency (notifying Data Owners)
-
Purpose limitation
-
Data minimisation
-
Accuracy
-
Storage limitation
-
Security integrity and confidentiality
-
Reporting a Personal Data Breach
-
Transfer limitation
-
Data Owner's rights and requests
-
Accountability
-
Record keeping
-
Training and audit
-
Privacy By Design and Data Protection Impact Assessment (DPIA)
-
Automated Processing (including profiling) and Automated Decision-Making
-
Direct marketing
-
Sharing Personal Data
-
Changes to this Sensitive Data and Compliance Policy
