Free Template Pack

The GDPR Logging & Monitoring Policy Pack

Security logging and data minimisation pull in opposite directions: you need enough log detail to detect a breach within 72 hours, and logs are themselves personal data you have to justify holding. This pack resolves that tension with four templates that document the lawful basis, bound the retention, and make the notification clock runnable.

• A GDPR logging policy template with the lawful basis written down
• A log retention schedule that survives a supervisory authority's question
• A minimisation register for personal data that ends up in logs
• A breach detection and 72-hour notification worksheet