EU GDPR Core Management System
EU GDPR Core Management System
An editable GDPR programme in compact form, with one Word volume and one Excel workbook for each topic, from scope and governance to breach response and audit.
Couldn't load pickup availability
Written and reviewed by practising specialists. Who writes this
Built and reviewed with our methodology. Read it
By document type
| Category | Files |
|---|---|
| Plans & Programmes | 1 |
| Forms & Records | 2 |
| Training & Awareness | 2 |
| Guides & Work Instructions | 1 |
| Tools & Workbooks | 12 |
| Other Documents | 8 |
Key documents
| Reference | Document | Format |
|---|---|---|
| AGS-GDPR-03 | Governance, Accountability and the DPO | Word |
| AGS-GDPR-04 | Data Mapping and Records of Processing | Word |
| AGS-GDPR-07 | Data Subject Rights | Word |
| AGS-GDPR-08 | Privacy by Design, Risk and DPIA | Word |
| AGS-GDPR-11 | Retention, Security and Breach | Word |
| AGS-GDPR-04 | Registers | Excel |
- Need the complete document list? Request it — same day
- Want to check the quality first? Preview free samples
Overview
An organisation building a GDPR programme for the first time needs every part of it, not a deep set on one topic. This system covers the programme end to end in short documents bound into volumes. Each topic folder holds a Word volume of short documents, each with its own code and control block, and a workbook with the registers for that topic.
A master document index lists every bound document with its requirement status (mandatory, conditional or good practice) and flags the points that need legal review. The system is clear about what it will not supply. Retention periods, your processors and conclusions on national law are left to you and recorded as open points, never assumed. A worked example pack follows one fictional processing activity through the set.
The system is built on Regulation (EU) 2016/679 (GDPR). Material from the European Data Protection Board and the former Article 29 Working Party is cited as guidance only. AGS is independent and is not affiliated with the European Data Protection Board or any supervisory authority. Regulations are referenced by citation.
What this system covers
- Programme control: a read-me-first, user guide, roadmap and definitions for the whole set.
- Scope and governance: scope and applicability, governance and the decision on whether a DPO is needed.
- Records: data mapping and records of processing, lawful basis and consent.
- Individuals: transparency and notices, and data subject rights with a policy, procedure, checklists and response letters.
- Risk: privacy by design and data protection impact assessment.
- Third parties: processors and international transfers.
- Retention and security: retention, security of processing and personal data breach.
- Improvement: training, audit and improvement, tied together by the master document index.
Who it's for
Controllers, processors and joint controllers of any size, private and public, within the territorial scope of the GDPR. It suits a smaller organisation building a programme for the first time. Privacy officers, DPOs, compliance, legal and security teams, internal audit and consultants each work from it.
For depth on a single process, see topic systems such as the EU GDPR Data Mapping & Records of Processing (ROPA) Management System and the EU GDPR Consent & Data Subject Rights Management System. For the GDPR and ISO/IEC 27001 in one system, see the EU GDPR & ISO/IEC 27001:2022 Integrated Management System.
Everything you get
Every toolkit gives you a full set of working documents for your standard, ready to edit and use.
Native Microsoft files. Add your logo and adapt every document to how you work.
Your full toolkit arrives as a ZIP the moment payment clears.
One purchase covers everyone in your organisation. No per-seat fees.
Built by people who run real audits, so the content matches what assessors check.
One payment, perpetual licence for your organisation. No subscriptions, no renewals.
Full refund if your files are faulty, incomplete or not as described and we can't put it right
Frequently asked questions
What exactly do I receive?
A downloadable ZIP containing the full set of ready-to-use documents for this toolkit — manuals, procedures, forms, records, checklists, guidance and training material, all in editable Word and Excel format. The exact document count is shown at the top of this page.
Are the documents really editable?
Yes. Every file is native Microsoft Word or Excel — no locked PDFs. Add your logo, change wording, and tailor the content to your organisation. The toolkit is yours to keep and reuse.
Does this certify my organisation?
No. These are documentation toolkits aligned to the relevant standard to help you prepare. Certification itself is issued by an accredited certification body after their audit. Our toolkits give you a strong, audit-ready starting point.
How is it delivered?
Instantly and digitally. There's no physical shipment — you download the files right after payment and receive a backup link by email.
Do I get updates?
Yes. If we revise this toolkit, you're entitled to the updated version at no extra cost — just contact us with your order details.
What is your refund policy?
These are digital products, so once a toolkit has been downloaded we cannot take it back. If you have not downloaded yet, contact us and we will cancel the order and refund you in full. We also refund in full if the files are damaged, incomplete, or not what the product page described.
Cannot find your standard?
Tell us which scheme you work to. We will point you to the right toolkit.
More in EU Compliance
See all 15
EU GDPR Privacy & Data Protection Awareness Training Package
EU Compliance337 documents $850USD
EU GDPR Data Protection Impact Assessment (DPIA) Management System
EU Compliance271 documents $850USD
EU GDPR Personal Data Breach Response Management System
EU Compliance331 documents $850USD