GDPR template · GDPR articles
Consent Management Policy
Procedures for obtaining, recording, and managing consent per GDPR Articles 6 and 7. Written for your company, citing the requirements below.
- Sections
- 5
- Requirements
- 2
- Formats
- PDF, Word
- Shelf
- 10 GDPRdocuments in all
No card needed to start.
- Cites
- Art. 6, Art. 7
- Formats
- PDF and Word
Sections
Each written around your company: your tools, your roles, your review dates.
- Purpose and Scope
- Valid Consent Requirements
- Consent Collection Mechanisms
- Consent Records and Evidence
- Withdrawal of Consent
Requirement it is written to
As named in the template description.
Art. 6, Art. 7, as named in the template description: Procedures for obtaining, recording, and managing consent per GDPR Articles 6 and 7.
Recent changes
Updates from official sources that name this policy. All policy updates
16 Oct 2026 · European Data Protection Board
Norwegian DPA fines Xandr EUR 8.6 million for unlawful processing of personal dataReview consent management procedures to ensure that when acting as a joint controller, the company independently verifies that consent obtained by another party is valid and covers its own processing.
13 Oct 2026 · European Data Protection Board
EDPB issues statement on smart glasses and GDPR complianceReview consent mechanisms for smart glasses processing, noting the difficulty of obtaining valid consent from non-users and the need for consent prior to processing.
9 Oct 2026 · European Data Protection Board
Italian DPA fines BBVA EUR 5,508,000 for failing to respect objection to direct marketingReview the Consent Management Policy to ensure technical measures synchronize objection preferences across all systems that send marketing communications.
- GDPR6 sections
Data Subject Access Request Procedure
CitesArt. 15–22PDF · WordCites GDPR Article 15–22, named in the template description. - GDPR6 sections
Data Protection Policy
CitesArt. 5 Art. 6 Art. 25 +4 +5PDF · WordCites Art. 5, Principles of Processing (GDPR); Art. 6, Lawfulness of Processing (GDPR); Art. 25, Data Protection by Design and Default (GDPR), and 4 more. - GDPR5 sections
Privacy Notice
CitesArt. 12 Art. 13 Art. 15 +3 +4PDF · WordCites Art. 12, Transparent Communication (GDPR); Art. 13, Information at Collection (GDPR); Art. 15, Right of Access (GDPR), and 3 more. - GDPR5 sections
DSAR Procedure
CitesArt. 15 Art. 17 Art. 20 +4 +5PDF · WordCites Art. 15, Right of Access (GDPR); Art. 17, Right to Erasure (GDPR); Art. 20, Right to Data Portability (GDPR), and 4 more. - GDPR5 sections
Records of Processing Activities
CitesArt. 30PDF · WordCites GDPR Article 30, named in the template description. - GDPR6 sections
Data Protection Impact Assessment
CitesArt. 35PDF · WordCites GDPR Article 35, named in the template description.
GDPR on its own
- Documents
- 10
- Plan
- Growth
- Price
- $199 a month or $1,990 a year
Growth also covers HIPAA, so GDPR + HIPAA stays at $199 a month. Two frameworks besides HIPAA need Scale.
Your first policy is free. No card needed to start.