GDPR template · GDPR articles
DSAR Procedure
Data Subject Access Request handling procedure. Written for your company, citing the controls below.
- Sections
- 5
- Controls cited
- 7
- Formats
- PDF, Word
- Shelf
- 10 GDPRdocuments in all
No card needed to start.
- Cites
- Art. 15, Art. 17, Art. 20 and 4 more
- Formats
- PDF and Word
Sections
Each written around your company: your tools, your roles, your review dates.
- Purpose and Scope
- Receiving Requests
- Identity Verification
- Processing
- Response Timelines
Controls it cites
The GDPR controls first, then the matching controls in other frameworks.
- Art. 15Right of AccessGDPR
- Art. 17Right to ErasureGDPR
- Art. 20Right to Data PortabilityGDPR
- SOC 2 P8.1Privacy: QualitySOC 2
- CCPA §1798.100§1798.100: Consumer Right to KnowCCPA
- CCPA §1798.105§1798.105: Right to DeleteCCPA
- CCPA §1798.106§1798.106: Right to CorrectCCPA
Recent changes
Updates from official sources that name this policy. All policy updates
9 Oct 2026 · European Data Protection Board
Italian DPA fines security company EUR 39,000 for GDPR violationsReview the DSAR procedure to ensure that access requests are recognized even without explicit reference to GDPR and that refusals include reasons and information on remedies.
9 Oct 2026 · European Data Protection Board
Italian DPA fines BBVA EUR 5,508,000 for failing to respect objection to direct marketingUpdate the DSAR Procedure to clarify that objections to marketing must be acted upon promptly regardless of how they are submitted.
- GDPR5 sections
Records of Processing Activities
CitesArt. 30PDF · WordCites GDPR Article 30, named in the template description. - GDPR6 sections
Data Protection Impact Assessment
CitesArt. 35PDF · WordCites GDPR Article 35, named in the template description. - GDPR5 sections
International Data Transfer Policy
CitesArt. 44–49PDF · WordCites GDPR Article 44–49, named in the template description. - GDPR5 sections
Data Retention and Erasure Policy
CitesArt. 5(1)(e) Art. 17PDF · WordCites GDPR Article 5(1)(e), named in the template description; GDPR Article 17, named in the template description. - GDPR6 sections
Data Breach Notification Procedure
CitesArt. 33 Art. 34PDF · WordCites GDPR Article 33, named in the template description; GDPR Article 34, named in the template description. - GDPR5 sections
Consent Management Policy
CitesArt. 6 Art. 7PDF · WordCites GDPR Article 6, named in the template description; GDPR Article 7, named in the template description.
GDPR on its own
- Documents
- 10
- Plan
- Growth
- Price
- $199 a month or $1,990 a year
Growth also covers HIPAA, so GDPR + HIPAA stays at $199 a month. Two frameworks besides HIPAA need Scale.
Your first policy is free. No card needed to start.