Resources

Documents & Tools

Compliance checklist
24 May

NDPA compliance checklist for 2025

A practical checklist for reviewing data collection, privacy notices, consent, vendor controls, retention, security safeguards, and evidence needed for NDPA compliance.

Policy templates
21 May

Essential privacy policy templates for SMEs

A quick guide to the core sections every SME privacy policy should cover, including data collected, lawful basis, retention, sharing, rights, cookies, and contact details.

DPIA guide
19 May

How to conduct your first DPIA

A starter outline for identifying high-risk processing, mapping data flows, assessing necessity and proportionality, documenting risks, and tracking mitigation actions.

Breach workflow
29 Feb

Data breach notification workflow

A response flow for triage, containment, impact assessment, internal escalation, regulator notification, affected-person communication, and post-incident review.

Processing agreement
27 Feb

Guide to data processing agreements

A summary of key processor contract clauses, including instructions, confidentiality, subprocessors, security controls, breach support, audits, deletion, and cross-border transfers.

Vendor risk
24 Feb

Vendor risk assessment framework

A framework for rating vendors by data sensitivity, access level, jurisdiction, security posture, compliance evidence, contract terms, and monitoring frequency.

Retention policy
18 Feb

Retention policy best practices

Guidance for building retention schedules, assigning record owners, defining deletion triggers, documenting legal holds, and proving secure disposal.

DSR request
17 Feb

Data subject rights (DSR) request form

A request intake structure for access, correction, deletion, objection, restriction, and portability requests, with identity checks and response tracking.

Security training
16 Feb

Cybersecurity basics for non-IT staff

A simple awareness guide covering phishing, password hygiene, safe file sharing, device security, incident reporting, and everyday privacy habits.