top of page

Your GDPR paperwork, sorted

If you screen, vet or employ staff, you hold a lot of personal data. UK GDPR and the Data Protection Act 2018 expect you to show how you handle it. Our GDPR pack gives you the core documents, written around how your business actually works. Full pack £449, additional DPIAs £99 each.

What our GDPR pack includes

The core documents UK GDPR expects you to have, written around the personal data your business actually holds.

1. Records of processing

A record of processing activities (ROPA) mapping what personal data you hold, why you hold it, the lawful basis, who you share it with and how long you keep it.

2. DPIAs and privacy notices

Data protection impact assessments for higher-risk processing, plus clear privacy notices for staff, candidates and customers. Additional DPIAs £99 each.

3. Retention schedules

A retention schedule setting out how long each type of record is kept and how it is disposed of, so you are not holding data longer than you need to.

About

Led by Craig Willetts

Craig Willetts is a lead auditor with over 20 years' experience in ISO management systems and compliance, including ISO 27001 information security and ISO 27701 privacy information management.

​

Screen My Staff is registered with the ICO and handles candidate personal data every day, so our GDPR packs are written by people who apply them in practice.

​

Working towards ISO 27001? CAW Consultancy can take your GDPR documents further into a full information security management system at cawconsultancy.co.uk.

Screen My Staff GDPR pack: ROPA, DPIAs, privacy notices and retention schedules for £449
bottom of page