A twelve-section, fully editable Word template — approved tools, data handling, AI agents, automated decisions about people, human accountability, and incident reporting. Written in plain English, ready to adapt in an afternoon.
Version 2.0 — last reviewed 1 October 2026
No marketing list, no nurture sequence. We'll email you once with the template and won't add you to anything. General guidance, not legal advice.
It is a twelve-section, fully editable Word template covering approved tools, data handling, AI agents, automated decisions about people, human accountability, and incident reporting. It is written in plain English and ready to adapt in an afternoon.
Twelve sections: scope and purpose, approved tools, the approved tools register and sub-processor review, permitted and prohibited uses, data handling, human accountability, agentic AI and automated actions, automated decisions about people, disclosure, incidents, training and acknowledgement, and review and enforcement.
Yes. Version 2.0 adds a section on agentic AI and automated actions. It defines an agent as a tool that takes actions rather than just drafting, and requires a named human owner, least-privilege access through dedicated service accounts, human approval before an agent sends external communications, makes payments, deletes data, changes permissions or makes significant decisions about people, plus logging, spend limits, a kill switch, and review before any agent goes into production.
It is an editable .docx Word file with [bracketed] prompts — replace, delete, approve, done. You adapt each bracketed section to your organisation.
Yes. It reflects UK GDPR as amended by the Data (Use and Access) Act 2025, including the four safeguards for significant automated decisions under Articles 22A to 22D. It also includes the 72-hour window for notifying the Information Commission (still known as the ICO) and DPA checks for AI tools.
It is a free download. There is no marketing list and no nurture sequence — we email you once with the template and will not add you to anything.
No. The template is general guidance, not legal advice. It is built from the framework in our AI usage policy guide, used with UK SMEs.