[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-detail-166506-en":3,"doc-seo-166506-105":30,"detail-sidebar-cat-1-en-105":90},{"code":4,"msg":5,"data":6},0,"success",{"doc_id":7,"user_id":8,"nickname":9,"user_avatar":10,"doc_module":11,"category_id":12,"category_name":13,"doc_title":14,"doc_description":15,"doc_content":16,"file_id":17,"file_url":18,"file_type":19,"file_size":20,"view_count":4,"is_deleted":4,"is_public":11,"is_downloadable":11,"audit_status":11,"page_count":21,"language":22,"language_code":23,"site_id":24,"html_lang":23,"table_of_contents":25,"faqs":26,"seo_title":27,"seo_description":15,"update_tm":28,"read_time":29},166506,2336474466412,"\tJames","https://ap-avatar.wpscdn.com/davatar_155a257f0dc6eb9ab79c44ca47cae57d",1,18,"Letters","Appropriate Policy Document (APD) Template","Appropriate Policy Document (APD) template for processing special category (SC) and criminal offence (CO) data under the Data Protection Act 2018. Outlines when an APD is required for specified Schedule 1 conditions, including employment and related data, and explains compliance with GDPR Article 5 principles. Guides retention, erasure, and accountability, including what must be included when relying on Schedule 1 conditions and what to provide if requested by the Commissioner.","Appropriate Policy Document template\nThe Data Protection Act 2018 (DPA 2018) outlines the requirement for an Appropriate Policy Document (APD) to be in place when processing special category (SC) and criminal offence (CO) data under certain specified conditions.\nAlmost all of the substantial public interest conditions in Schedule 1 Part 2 of the DPA 2018, plus the condition for processing employment, social security and social protection data, require you to have an APD in place. (See Schedule 1 paragraphs 1(1)(b) and 5).\nThis document should demonstrate that the processing of SC and CO data based on these specific Schedule 1 conditions is compliant with the requirements of the General Data Protection Regulation (GDPR) Article 5 principles. In particular, it should outline your retention policies with respect to this data. (See Schedule 1 Part 4).\nIf you process SC or CO data for a number of different purposes you do not need a separate policy document for each condition or processing activity – one document can cover them all. You may reference policies and procedures which are relevant to all the identified processing. Whilst you may explain your compliance with the principles in general terms, without specific reference to each individual Schedule 1 condition you have listed, you should provide the data subject with sufficient information to understand how you are processing their SC or CO data and how long you will retain it for.\nHowever if you rely on one of these conditions, your general record of processing activities under GDPR Article 30 must include:\nthe condition which is relied upon;\nhow the processing satisfies Article 6 of the GDPR (lawfulness of\nprocessing); and\nwhether the personal data is retained and erased in accordance\nwith the retention policies outlined in this APD, and if not,\nthe reasons why these policies have not been followed.\nThe APD therefore complements your general record of processing under Article 30 of the GDPR and provides SC and CO data with further protection and accountability. See Schedule 1 Part 4 paragraph 41.\nYou must keep the APD under review and will need to retain it until six months after the date you stop the relevant processing. If the Commissioner asks to see it, you must provide it free of charge. See Schedule 1 Part 4 paragraph 40.\nYou should read this document alongside our \u0013 HYPERLINK \"https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/\" \u0014Guide to the GDPR\u0015.\nNote your APD does not have to be structured in accordance with this document. This template is intended as a guideline only.\nGive a brief description of each category of SC/CO data processed. You may wish to refer to your Article 30 record of processing for that particular data:\nGive the name and paragraph number of your relevant Schedule 1 condition(s) for processing. Alternatively, you may wish to provide a link to your privacy policy, your record of processing or any other relevant documentation:\nYou need to explain, in brief and with reference to the conditions relied upon, how your procedures ensure your compliance with the principles below.\nThis helps you meet your accountability obligations. You have a responsibility to   demonstrate that your policies and procedures ensure your compliance with the wider requirements of the GDPR and in particular the principles. The sensitivity of SC and CO data means the technical and organisational measures you have in place to protect such data are crucially important.\nThe questions listed in each box are intended to help you describe how you satisfy each principle generally, and are based on the checklist for each principle provided in the \u0013 HYPERLINK \"https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/\" \u0014Guide to the GDPR\u0015. They are not exhaustive and are only intended to act as a guideline.\nIn explaining your compliance with the principles you shou","cbCaittaqRrrcQ7T","https://ap.wps.com/l/cbCaittaqRrrcQ7T","docx",76530,5,"English","en",105,"# APD purpose and when it is required\n## GDPR Article 5 compliance and transparency\n## Scope covering multiple processing activities\n## What to include when relying on Schedule 1 conditions\n## Keeping the APD under review and retention timeline\n## How to structure category descriptions\n## Addressing compliance principles and retention/erasure","[{\"question\":\"When is an Appropriate Policy Document (APD) required for special category and criminal offence data?\",\"answer\":\"An APD is required when processing SC and CO data under specified conditions in Schedule 1 Part 2 of the Data Protection Act 2018, including employment-related processing and social security or social protection data.\"},{\"question\":\"Can one APD cover multiple Schedule 1 conditions or processing activities?\",\"answer\":\"Yes. If you process SC or CO data for different purposes, a single document can cover them all, with references to relevant policies and procedures.\"},{\"question\":\"What specific information must be included if you rely on a Schedule 1 condition?\",\"answer\":\"Your general record of processing under GDPR Article 30 must include the relied-on condition, how processing satisfies GDPR Article 6, and whether data is retained and erased according to the APD’s retention policies, including reasons if not followed.\"}]","Appropriate Policy Document (APD) Template | DOCX",1788194176,2,{"code":4,"msg":31,"data":32},"ok",{"site_id":24,"language":23,"slug":33,"title":14,"keywords":34,"description":15,"schema_data":35,"social_meta":85,"head_meta":87,"extra_data":89,"updated_unix":28},"appropriate-policy-document-apd-template","",{"@graph":36,"@context":84},[37,53,67],{"@type":38,"itemListElement":39},"BreadcrumbList",[40,44,47,50],{"item":41,"name":42,"@type":43,"position":11},"https://docshare.wps.com","Home","ListItem",{"item":45,"name":46,"@type":43,"position":29},"https://docshare.wps.com/template/","Template",{"item":48,"name":13,"@type":43,"position":49},"https://docshare.wps.com/template/letters/",3,{"item":51,"name":14,"@type":43,"position":52},"https://docshare.wps.com/template/appropriate-policy-document-apd-template/166506/",4,{"url":51,"name":14,"@type":54,"author":55,"headline":14,"publisher":57,"fileFormat":60,"inLanguage":23,"description":15,"dateModified":61,"datePublished":61,"encodingFormat":60,"isAccessibleForFree":62,"interactionStatistic":63},"DigitalDocument",{"name":9,"@type":56},"Person",{"url":41,"name":58,"@type":59},"DocShare","Organization","application/vnd.openxmlformats-officedocument.wordprocessingml.document","2026-08-31",true,{"@type":64,"interactionType":65,"userInteractionCount":4},"InteractionCounter",{"@type":66},"ViewAction",{"@type":68,"mainEntity":69},"FAQPage",[70,76,80],{"name":71,"@type":72,"acceptedAnswer":73},"When is an Appropriate Policy Document (APD) required for special category and criminal offence data?","Question",{"text":74,"@type":75},"An APD is required when processing SC and CO data under specified conditions in Schedule 1 Part 2 of the Data Protection Act 2018, including employment-related processing and social security or social protection data.","Answer",{"name":77,"@type":72,"acceptedAnswer":78},"Can one APD cover multiple Schedule 1 conditions or processing activities?",{"text":79,"@type":75},"Yes. If you process SC or CO data for different purposes, a single document can cover them all, with references to relevant policies and procedures.",{"name":81,"@type":72,"acceptedAnswer":82},"What specific information must be included if you rely on a Schedule 1 condition?",{"text":83,"@type":75},"Your general record of processing under GDPR Article 30 must include the relied-on condition, how processing satisfies GDPR Article 6, and whether data is retained and erased according to the APD’s retention policies, including reasons if not followed.","https://schema.org",{"og:url":51,"og:type":86,"og:title":14,"og:site_name":58,"og:description":15},"article",{"robots":88,"canonical":51},"index,follow",{"doc_id":7,"site_id":24},{"code":4,"msg":5,"data":91},[92,97,102,107,112,117,122,125,129],{"id":93,"doc_module":11,"doc_module_name":46,"category_name":94,"show_sort_weight":95,"slug":96},11,"Presentations",90,"presentations",{"id":98,"doc_module":11,"doc_module_name":46,"category_name":99,"show_sort_weight":100,"slug":101},12,"Resumes",80,"resumes",{"id":103,"doc_module":11,"doc_module_name":46,"category_name":104,"show_sort_weight":105,"slug":106},14,"Invoices",70,"invoices",{"id":108,"doc_module":11,"doc_module_name":46,"category_name":109,"show_sort_weight":110,"slug":111},15,"Posters",60,"posters",{"id":113,"doc_module":11,"doc_module_name":46,"category_name":114,"show_sort_weight":115,"slug":116},16,"Social Media",50,"social-media",{"id":118,"doc_module":11,"doc_module_name":46,"category_name":119,"show_sort_weight":120,"slug":121},17,"Forms",40,"forms",{"id":12,"doc_module":11,"doc_module_name":46,"category_name":13,"show_sort_weight":123,"slug":124},30,"letters",{"id":126,"doc_module":11,"doc_module_name":46,"category_name":127,"show_sort_weight":21,"slug":128},21,"Paper Templates","papers-templates",{"id":130,"doc_module":11,"doc_module_name":46,"category_name":131,"show_sort_weight":4,"slug":132},158,"General","general-158"]