The table below summarises the document templates included in the compliance manual which relate to data protection and AI.
If you require any further support with embedding data protection requirements, please contact the compliance technical helpline.
| CORE24 | Data Protection Policy |
| CORE24a | Appendix A – Right of access procedure (SARs) |
| CORE24b | Appendix B – Right to rectification |
| CORE24c | Appendix C – Right to erasure procedures (right to be forgotten) |
| CORE24d | Appendix D – Right to restriction of processing |
| CORE24e | Appendix E – Right to Object |
| CORE24f | Appendix F – Rights related to automated decision making and profiling |
| CORE24g | Appendix G – Rights related to data portability |
| CORE25 | Full privacy notice |
| CORE25a | Fair processing notice |
| CORE26 | Data asset register and record of processing activities |
| CORE27 | Breaches and issues policy template |
| CORE28 | Data Subject Rights Register |
| CORE36 | AI acceptable use policy template |
| CORE36A | AI use in customer communications AI template |
| CORE37 | AI Proof of concept Template |
| CORE38 | Data retention (record keeping policy) |
| CORE39 | Information Security Policy |
| CORE40 | Data protection contract & third-party processor register |
| CORE41 | Acceptable use of IT, communications and information systems policy |
| CORE42 | Clear Desk Policy |
| CORE43 | Legitimate Interest Assessment Template |