Appropriate Policy Document Template

The Data Protection Act 2018 (DPA18) outlines the requirement for an Appropriate Policy Document (APD) to be in place when processing special category and/or criminal offence data under certain specified conditions. In November 2019, the ICO published a template for this document that can be easily customised and used by businesses to meet the requirements in this area if they do not already have such a template or document in place.

The aim of the APD is to allow firms to demonstrate that when processing special category and/or criminal offence data under the set conditions, they do so in compliance with the requirements of the General Data Protection Regulation (GDPR) Article 5 principles.

Businesses are required to keep the APD under review and are obligated to retain the document for six months after the date they stop the relevant processing. The ICO’s APD Template can be downloaded free of charge from their website.

If you are looking for other GDPR and DPA18 policies, templates, training materials or complete toolkits, visit our extensive GDPR/DPA18 Document Section, where you will find market leading documents already used by the NHS, Government departments, banks, schools, universities, large corporate entities and thousands of SME’s.