Expert Advice Community

Guest

Documentation templates for GDPR and ISO 27001

  Quote
Guest
Guest user Created:   May 21, 2018 Last commented:   May 21, 2018

Documentation templates for GDPR and ISO 27001

We note that the information is for company internal and not for commercial use. We are interested in the specifics of that - we want to be compliant and may need to demonstrate this to some of our customers, and some of the documents such as the supplier data processing agreements need to be shared and signed by suppliers to be valid. Quite a few other documents are to inform customers/suppliers. Further, it is normal practice for companies to place their privacy policy on their website - would this count as a breach?
0 0

Assign topic to the user

EU GDPR DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

EU GDPR DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Andrei Hanganu May 21, 2018

We want to use document templates to help us accelerate our GDPR and ISO 27001 compliance as a small company and we are keen to understand if your product is suitable?

Answer:

As long as you use the documents for your own company and not for commercial use sending certain documents to your customers or suppliers part of your implementation effort won't constitute a breach. Documents such as Data Processing Agreements would need to be negotiated with and signed by your suppliers and of course you would need to share them with your suppliers. Same goes for the Privacy Notices as well, they are meant to be presented to the data subjects.

To learn more about the EU GDPR check out our free “EU GDPR Foundations Course” (https://advisera.com/training/eu-gdpr-foundations-course// ).

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

May 21, 2018

May 21, 2018

Suggested Topics

Guest user Created:   Sep 01, 2022 EU GDPR
Replies: 1
0 0

Determining necessary security measures

Guest user Created:   May 27, 2020 EU GDPR
Replies: 1
0 0

Risk assessment for GDPR