Scissors on top of a cardboard box with 'fragile' tape

Tools

We’ve brought some of our tools together here. They’re free to use under open licenses. Use of these tools is at your own risk and does not constitute legal advice. Please give Corrick Wales & Partners attribution if you share the results or create a forked version.

If you identify a problem or would like us to help you use any of our tools, get in touch.


GDPR assessment & implementation plan (controllers)

This is a template for performing an assessment of a data controller’s implementation of GDPR, with ways to prioritise and plan actions to improve your compliance.

Are we a data controller? Data Controllers are the main decision-makers – they exercise overall control over the purposes and means of the processing of personal data. The ICO provides more details on the definition of controller and processor here.


GDPR assessment & implementation plan (processors)

This is a template for performing an assessment of a data processor’s implementation of GDPR, with ways to prioritise and plan actions to improve your compliance.

Are we a data processor? Data Processors act on behalf of, and only on the instructions of, the relevant data controller. The ICO provides more details on the definition of controller and processor here.


RECORD OF PROCESSING TEMPLATE

This is a template for managing the documentation of personal data that you as an organisation process.

The ICO provides guidance on how to document your processing activities here.