©

©

Enumerates the personal data collected such as name, contact info, etc.


Declares the specific purpose(s) of the personal data processing


Declares the criteria for lawful processing used


Specifies the manner of collection; E.g. physical forms, online forms, etc.


Explains the primary & secondary uses of the data

Specifies the manner of storage & retention period


Specifies info on data transmission to other parties


Specifies the recipients within & outside the org, including the description, basis &
purpose of sharing


Specifies the manner of disposal


Specifies risks at any stage of the processing

Enumerate organizational, physical & technical security measures to address risks


Includes description & extent of automated access, if any


Specifies the name of PIC


Specifies the Email, landline, mobile number or other contact info of the DPO


Specifies info on how to exercise applicable rights specified
© ©
©
© ©
©
©
•

•
•
•

©
© ©
•

•
•

•
•