Why choose us?AboutPricing
LeadersSafeguardingCPDGovernorHubKeyGPT

The UK GDPR: template record of processing activities

Under the UK GDPR, you must record how you process the personal data you hold. Use our template and guidance to help you comply with this requirement now and on an ongoing basis in your school.

Last reviewed on 20 March 2024
School types: All•School phases: All•Ref: 34641
Contents
  1. Download our template record
  2. How you must populate your record
  3. You must record the different ways you process the same personal data
  4. Maintain your record on an ongoing basis
  5. Template for data processors

Download our template record

Find the template in the tab 'record of processing activities'. It includes entries for personal data that schools commonly process.

Processing here means anything done to personal data, such as collecting, recording, organising, structuring, storing, adapting, altering, retrieving, using, disseminating, erasing or destroying. It can be manual or automated. 

However, the template doesn't contain a complete list, so you'll need to add and/or delete entries as necessary.

Read on to find out how to populate and maintain your record.  

KeyDoc: template record of processing activities XLSX, 46.5 KB
Download

How you must populate your record

You must record the information listed in columns A to K to be compliant with the UK General Data Protection Regulation (UK GDPR).

The information listed in the rest of the columns is useful and helps support good practice, but isn't necessary to comply with requirements.

If