{"product_id":"eu-gdpr-core-management-system","title":"EU GDPR Core Management System","description":"\u003cp\u003e\u003cem\u003eAn editable GDPR programme in compact form, with one Word volume and one Excel workbook for each topic, from scope and governance to breach response and audit.\u003c\/em\u003e\u003c\/p\u003e\n\u003ch2\u003eOverview\u003c\/h2\u003e\n\u003cp\u003eAn organisation building a GDPR programme for the first time needs every part of it, not a deep set on one topic. This system covers the programme end to end in short documents bound into volumes. Each topic folder holds a Word volume of short documents, each with its own code and control block, and a workbook with the registers for that topic.\u003c\/p\u003e\n\u003cp\u003eA master document index lists every bound document with its requirement status (mandatory, conditional or good practice) and flags the points that need legal review. The system is clear about what it will not supply. Retention periods, your processors and conclusions on national law are left to you and recorded as open points, never assumed. A worked example pack follows one fictional processing activity through the set.\u003c\/p\u003e\n\u003cp\u003eThe system is built on Regulation (EU) 2016\/679 (GDPR). Material from the European Data Protection Board and the former Article 29 Working Party is cited as guidance only. AGS is independent and is not affiliated with the European Data Protection Board or any supervisory authority. Regulations are referenced by citation.\u003c\/p\u003e\n\u003ch2\u003eWhat this system covers\u003c\/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eProgramme control:\u003c\/strong\u003e a read-me-first, user guide, roadmap and definitions for the whole set.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eScope and governance:\u003c\/strong\u003e scope and applicability, governance and the decision on whether a DPO is needed.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eRecords:\u003c\/strong\u003e data mapping and records of processing, lawful basis and consent.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eIndividuals:\u003c\/strong\u003e transparency and notices, and data subject rights with a policy, procedure, checklists and response letters.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eRisk:\u003c\/strong\u003e privacy by design and data protection impact assessment.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eThird parties:\u003c\/strong\u003e processors and international transfers.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eRetention and security:\u003c\/strong\u003e retention, security of processing and personal data breach.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eImprovement:\u003c\/strong\u003e training, audit and improvement, tied together by the master document index.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch2\u003eWho it's for\u003c\/h2\u003e\n\u003cp\u003eControllers, processors and joint controllers of any size, private and public, within the territorial scope of the GDPR. It suits a smaller organisation building a programme for the first time. Privacy officers, DPOs, compliance, legal and security teams, internal audit and consultants each work from it.\u003c\/p\u003e\n\u003cp\u003eFor depth on a single process, see topic systems such as the EU GDPR Data Mapping \u0026amp; Records of Processing (ROPA) Management System and the EU GDPR Consent \u0026amp; Data Subject Rights Management System. For the GDPR and ISO\/IEC 27001 in one system, see the EU GDPR \u0026amp; ISO\/IEC 27001:2022 Integrated Management System.\u003c\/p\u003e","brand":"Apex Global Solutions AGS","offers":[{"title":"Default Title","offer_id":57395125813588,"sku":"AGS-19-009","price":950.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1052\/4996\/4372\/files\/AGS-19-009.png?v=1790973754","url":"https:\/\/agskits.com\/products\/eu-gdpr-core-management-system","provider":"Apex Global Solutions","version":"1.0","type":"link"}