Set the rules

What it’s for

Your RoPA mapped the data. The policy sets the rules you commit to and points to the document that carries out each one. Every bracket and blank field is yours to fill in.

What you fill in

1. 1

   The policy

   A Word document of 17 sections with a header and four fields to complete. Every bracket and blank field is yours to fill in.

2. 2

   What it commits you to

   The commitments the Act and Rules ask of a Data Fiduciary, each pointing to the document in this toolkit that carries it out.

3. 3

   Significant Data Fiduciary

   A DPO is required only once you are notified as a Significant Data Fiduciary.

4. 4

   Before you adopt it

   Have counsel review it.

From the video

Two frames from the walkthrough. The worked example is a fictional online store.

Basis Act s.10(2)(a); Act s.6(1); Rule 14(3); Rule 8(3); Rule 7(2). How we arrived here