GDPR Overview

• GDPR Overview
• Scope of GDPR
• Principles of GDPR
• Key GDPR Changes
• Useful Links

Policy, Procedures, Forms & Templates

Policy

• Data Protection Policy
• Data Protection Policy (PDF)

Procedures

• Data Protection Notice Procedure
• Data Protection Impact Assessments (DPIA's)
• Personal Data Security Breach Management Procedures v2.0
• Data Subject Rights Procedure

Forms and Templates

• Data Protection Notice Template
• Data Protection Impact Assessment Procedure Template
• Personal Data Breach Report Form
• Data Rights Request Form
• Data Access Request Form

Guidelines

• Guide to Direct Marketing

Individual Rights

UCC's Data Subject Rights Procedure can be found here:

•  Data Subject Rights Procedure

Privacy by Design and Default

Privacy by Design means that organisations need to consider privacy at the initial design stages and throughout the complete development process of new products, processes or services that involve processing personal data.

Privacy by Default means that when a system or service includes choices for the individual on how much personal data he/she shares with others, the default settings should be the most privacy friendly ones. 

It has always been good practice to adopt privacy by design as a default approach; privacy by design and the minimisation of data have always been implicit requirements of the data protection principles. However, the GDPR enshrines both the principle of ‘privacy by design’ and the principle of ‘privacy by default’ in law. This means that service settings must be automatically privacy friendly, and requires that the development of services and products takes account of privacy considerations from the outset.

Data Protection Impact Assessments (DPIA)

• Data Protection Impact Assessment Procedure
• Data Protection Impact Assessment Procedure Template