GDPR template · GDPR articles
Privacy Notice
External GDPR privacy notice. Written for your company, citing the controls below.
- Sections
- 5
- Controls cited
- 6
- Formats
- PDF, Word
- Shelf
- 10 GDPRdocuments in all
No card needed to start.
- Cites
- Art. 12, Art. 13, Art. 15 and 3 more
- Formats
- PDF and Word
Sections
Each written around your company: your tools, your roles, your review dates.
- Who We Are
- What Data We Collect
- Why We Process
- Your Rights
- Contact Us
Controls it cites
The GDPR controls first, then the matching controls in other frameworks.
- Art. 12Transparent CommunicationGDPR
- Art. 13Information at CollectionGDPR
- Art. 15Right of AccessGDPR
- SOC 2 P1.1Privacy: NoticeSOC 2
- ISO A.5.34Privacy and Protection of PIIISO 27001
- CCPA §1798.100§1798.100: Consumer Right to KnowCCPA
Recent changes
Updates from official sources that name this policy. All policy updates
13 Oct 2026 · European Data Protection Board
EDPB issues statement on smart glasses and GDPR complianceReview the privacy notice to address transparency challenges for non-users of smart glasses, including how to provide in-the-moment transparency and information required under Articles 13 and 14.
9 Oct 2026 · European Data Protection Board
Italian DPA fines security company EUR 39,000 for GDPR violationsReview the privacy notice to ensure it accurately describes processing of geolocation data and does not mention special categories of data that are not processed.
9 Oct 2026 · European Data Protection Board
Italian DPA fines Emirates EUR 180,000 over passenger health dataReview privacy notices to ensure they clearly identify categories of passengers required to complete MEDIF forms and specify which sections and fields are necessary.
- GDPR5 sections
DSAR Procedure
CitesArt. 15 Art. 17 Art. 20 +4 +5PDF · WordCites Art. 15, Right of Access (GDPR); Art. 17, Right to Erasure (GDPR); Art. 20, Right to Data Portability (GDPR), and 4 more. - GDPR5 sections
Records of Processing Activities
CitesArt. 30PDF · WordCites GDPR Article 30, named in the template description. - GDPR6 sections
Data Protection Impact Assessment
CitesArt. 35PDF · WordCites GDPR Article 35, named in the template description. - GDPR5 sections
International Data Transfer Policy
CitesArt. 44–49PDF · WordCites GDPR Article 44–49, named in the template description. - GDPR5 sections
Data Retention and Erasure Policy
CitesArt. 5(1)(e) Art. 17PDF · WordCites GDPR Article 5(1)(e), named in the template description; GDPR Article 17, named in the template description. - GDPR6 sections
Data Breach Notification Procedure
CitesArt. 33 Art. 34PDF · WordCites GDPR Article 33, named in the template description; GDPR Article 34, named in the template description.
GDPR on its own
- Documents
- 10
- Plan
- Growth
- Price
- $199 a month or $1,990 a year
Growth also covers HIPAA, so GDPR + HIPAA stays at $199 a month. Two frameworks besides HIPAA need Scale.
Your first policy is free. No card needed to start.