GDPR Evidence Starter Kit — The Records the ICO Actually Expects You to Keep
Just been handed “sort out our GDPR”? This free, fill-in starter kit gives UK small businesses the six records that matter — a processing record, lawful basis register, breach register, DSAR log, retention schedule, and a plain-English privacy notice. Guided, with worked examples and time estimates. No legal jargon.
What you'll get
- Fill-in templates for the six GDPR records small businesses actually need
- Record of Processing Activities, lawful basis register, breach register, DSAR log, retention schedule, and a privacy notice
- Worked examples and time estimates on every record — the core one takes about 20 minutes
- UK-specific: UK GDPR, ICO, the 72-hour breach rule, and the Data (Use and Access) Act 2025
No spam. Unsubscribe any time. Your data is processed under our privacy policy.
Take it further with PolicySign
Got a privacy policy but no way to prove your team has read it? PolicySign distributes your policies, collects e-signatures, and tracks who has acknowledged them — the bit of GDPR most small businesses forget until a client asks. Start free at compliancepack.securapath.co.uk/policysign/
Try PolicySign freeWant the complete workbook?
This starter kit gives you the essential records to get started. For the complete, fill-in GDPR documentation set — more records, more worked examples, and guidance for trickier cases like international transfers and special category data — get the GDPR Evidence Workbook for UK SMBs on Amazon.
You might also like: SMB Security Playbook