From a task to a decision
UK GDPR implementation, step by step.
Follow a realistic workflow. Know what to check, what to record and when to involve the right people.
Choose an implementation workflow
Before a new system or supplier goes live
Turn a product proposal into a documented decision about data, suppliers, risks and the controls that must work.
Open the playbook 6 PRACTICAL STEPSA person asks for their information and deletion
Recognise each right, calculate the correct timetable, search and review, then explain the decision clearly.
Open the playbook 7 PRACTICAL STEPSA suspected personal data breach is reported
Contain the incident, establish the facts and awareness, and make separate, recorded notification decisions.
Open the playbookUse the sequence. Check your circumstances.
Example evidence is illustrative. It shows what a usable record might look like; it is not a finding about any organisation or proof of a completed review. The order of work is a practical sequence. Set project dates to suit the actual risk and resources; statutory deadlines continue to apply independently.