Free GDPR Compliance Templates to Help with Article 30 Record-Keeping

We've written 3 Free GDPR Compliance Templates for you to download here and start using right away. They're a great stepping-stone if you want to use our software too...

They're designed to help you capture a snapshot of all the personal data you process and document where and what you store, and who else processes the data on your behalf.

Template 1 - Free GDPR Data Compliance Data Storage Template

Click here to download our Free GDPR Compliance Template to record all your Data Stores.

This spreadsheet will allow you to list and describe all the places you store personal data in your business. This includes devices and software, including online / cloud storage locations. 

The template gives you a structure to list what is stored on each device / software product or service. It also challenges you to describe the data security you have in place in each instance. You can also store the third party details of organisations you use to process data, like Google and Sage.

Template 2 - Free GDPR Data Profiling Template

Click here to download our Free GDPR Compliance Template to record your Data Profile.

This spreadsheet will allow you to profile and document the types of Personal Data you store and use in your business.

It prompts you to document whose data you have, why you have it and what are the lawful bases for processing that data. It also records the categories of personal data you use in your business. It also allows you to record your data retention position for each type of data you process.

Template 3 - Free GDPR Data Processors Template

Click here to download our Free GDPR Compliance Template to record all your Data Processors.

This spreadsheet will help you identify all the third party organisations that process data on your behalf. 

This includes organisations that provide you with business services; like email, accounting, websites, ecommerce and so on. Anyone who you share the Personal Data in your business with can be recorded and profiled, recording whether they are GDPR compliant along with contact details in case you need to engage their help with handling a Data Breach or a Subject Access Request.

Going Further

If you'd like to take this record-keeping further, then do sign up for our software. In addition to the record-keeping that it provides, it also has a process management system for handling Data Breaches and Subject Access Requests. You can read more about moving on from Spreadsheets for DPA18 / GDPR Compliance here.