Scroll down Town Council Specific Documents. Just click on the links to download what you want to use.
A guidance document and template for carrying out a Data Protection Impact Assessment on your organisation’s use of CCTV.
A template policy to explain your organisation’s use of CCTV, including the purpose, camera locations, and retention periods.
A template for gaining consent from Councillors when taking photos or videos for which their consent is required.
A template for gaining consent from the workforce when taking photos or videos for which their consent is required.
A policy which details the controls expected when staff or councillors use their own personal devices to access or otherwise process council data. Sometimes incorporated into an Information Security Policy.
Defines a data breach and explains your organisation’s procedure if one occurs. This also includes a breach reporting form. (A breach log is mandatory).
A mandatory policy which explains how your organisation handles data. To be published on your website for service users, visitors etc, and so staff understand what is expected of them.
A non-mandatory policy to explain the security measures adopted by your organisation to ensure the confidentiality, integrity and availability of personal data and other information assets. It defines the roles and responsibilities of individuals within the organisation to achieve this (which should be adapted as required by the organisation)
A policy that explains how long different types of personal data should be retained and how they will be securely disposed of when no longer required. It should be published to inform residents, service users and visitors, and to ensure staff and councillors understand their responsibilities. Whilst the retention schedule is the essential operational document, a supporting policy is recommended. This template includes a Town Council-specific retention schedule.
A template policy designed to support councils in developing their approach to the use of generative artificial intelligence (AI). It provides a framework covering governance, information security, data protection and the responsible use of AI technologies.
General privacy notice for all members of the public regarding town council data processing.
A mandatory document which explains how your organisation will process the personal data of visitors to Council premises, events and facilities.
A mandatory document which explains how your organisation will process the personal data (including special category data) of employees or volunteers.
A ROPA template (containing examples) which can be used to document processing activities involving personal data. It is a legal requirement for controllers to document their processing activities.
A guidance document which explains what a Subject Access Request (SAR) is and the steps you need to take to respond to them.