Title Page
-
Prepared by
-
Conducted on
-
Company Name
-
Site / Building
Special Category Data Checklist
-
We have checked that the processing of the special category data is necessary for the purpose we have identified and are satisfied there is no other reasonable and less intrusive way to achieve that purpose.
-
We have identified an Article 6 lawful basis for processing the special category data.
-
We have identified an appropriate Article 9 condition for processing the special category data.
-
Where required, we have also identified an appropriate DPA 2018 Schedule 1 condition.
-
We have documented which special categories of data we are processing.
-
Where required, we have an appropriate policy document in place.
-
We have considered whether we need to do a DPIA.
-
We include specific information about our processing of special category data in our privacy information for individuals.
-
If we use special category data for automated decision making (including profiling), we have checked that we comply with Article 22.
-
We have considered whether the risks associated with our use of special category data affect our other obligations around data minimisation, security, and appointing Data Protection Officers (DPOs) and representatives.
-
Name and Signature
