Appendix 2 - Example of a data protection policy
We have included an example of a data protection policy which members might find useful when thinking about what to include in their own policies.
Data Protection Policy
Download Data Protection Policy File
![](/media/knhhfejr/website-banner-and-slider.png?rxy=0.7876672850494348,0.5795761667938335&width=120&height=120&rnd=133505657931830000)
GDPR guide for law firms
Data protection regulations from the perspective of a legal practice
- Ten steps
- Law firms as data controllers
- Create a record of data processing
- Marketing
- Client confidentiality, legal privilege and limited exemptions
- Sharing data with third parties
- Data retention
- Data protection officers
- AML and data protection
- Security
- Reporting personal data breaches
- Requests for copies of personal data
- Appendix 1 - Consent
- xCreate a record of data processing
- Appendix 2 - Example of a data protection policy
- Example of Privacy Notice
- xClient confidentiality, legal privilege and limited exemptions
- xData retention
- xSharing data with third parties
- xData protection officers
- xSecurity
- xReporting personal data breaches
- xRequests for client personal data
- Appendix 1 - Consent
- Appendix 2 - Example of a data protection policy