An order authorizing access to personnel data, familiarization with rules and compliance with confidentiality. May include an individual employee undertaking and appointment of a responsible person.
⚠️ This is a blank template, not legal advice: check the wording with a lawyer and adapt it to your jurisdiction and your case.
Required fields not filled: 13. The PDF will have blank lines in their place to fill in by hand.
Click a field label in the text and type, or use the form. Empty fields become blank lines in the PDF.
, To comply with personal data and employment legislation, I order as follows with effect from : 1. Approve the list of persons granted work-related access and the limits of their authority: Access applies only while the stated function is performed and only to necessary information. 2. Require authorized persons to process data only for a lawful work purpose, maintain confidentiality, avoid copying or disclosing data to outsiders without grounds, and use only approved media and channels. Immediately report violations, lost documents and misdirected information to: . Authorized persons must not use personal email, publicly accessible links or unauthorized storage devices to transfer data. Do not leave documents or open sessions unattended; store paper records in restricted-access locations. Before transfer, check the recipient's authority, purpose and necessary information scope. Forward data subject requests to the responsible person for registration and response; do not destroy documents on your own initiative. 3. shall, by , familiarize authorized persons with this order and regulations ; arrange signature records and training in protection rules. Store signed documents as follows: . 4. The current person responsible for organizing personal data processing shall monitor implementation within previously granted authority. 5. Review access rights on transfer, changed duties and dismissal; revoke access and ensure return of media when the ground ceases. I retain oversight. Liability applies only under statutory procedures and limits; this order imposes no fines on employees. __________ / / Order acknowledged by: full names, signatures and dates __________.
For each role, specify only necessary operations: viewing, entry, amendment, transfer and deletion. The list approved above and the matrix must agree.
| Full name / position | Data categories / purpose | Permitted operations | System / storage location | Access start / end |
| Full name and position | Documents / versions | Signature | Date |
This is a draft template. Before use, have a lawyer review the text and adapt it to the actual circumstances, internal regulations and applicable law. This document is not legal advice.
Documents that are usually drawn up in the same process.
Internal rules for processing personnel data: purposes, access, storage, transfers, requests and incidents. Intended for employers; requires a completed purpose register and an accurate description o…
Approves internal regulations on handling employees' personal data and assigns implementation tasks.
Appoints the person responsible for organizing personal data processing by a legal entity; provides for voluntary allocation of functions for an individual entrepreneur.
Internal organizational document of the controller governing access, media, technical protection and incident response. Supplements the public policy and processing regulation.
8 of 17 fields are taken from the company, employee or counterparty record, the questionnaire can be dictated to the AI, and the finished document comes with a number, a PDF and an acknowledgement record.