A practical checklist for reviewing data collection, privacy notices, consent, vendor controls, retention, security safeguards, and evidence needed for NDPA compliance.
A quick guide to the core sections every SME privacy policy should cover, including data collected, lawful basis, retention, sharing, rights, cookies, and contact details.
A starter outline for identifying high-risk processing, mapping data flows, assessing necessity and proportionality, documenting risks, and tracking mitigation actions.
A response flow for triage, containment, impact assessment, internal escalation, regulator notification, affected-person communication, and post-incident review.
A summary of key processor contract clauses, including instructions, confidentiality, subprocessors, security controls, breach support, audits, deletion, and cross-border transfers.
A framework for rating vendors by data sensitivity, access level, jurisdiction, security posture, compliance evidence, contract terms, and monitoring frequency.
Guidance for building retention schedules, assigning record owners, defining deletion triggers, documenting legal holds, and proving secure disposal.
A request intake structure for access, correction, deletion, objection, restriction, and portability requests, with identity checks and response tracking.
A simple awareness guide covering phishing, password hygiene, safe file sharing, device security, incident reporting, and everyday privacy habits.