GDPR: Which policies and documents have been updated?

We provide a list of model policies and documents in which the sample wording has been updated to comply with the General Data Protection Regulation (GDPR), which is in force from 25 May 2018.

The introduction of the GDPR means that employers should review their documentation to ensure that: data protection and privacy considerations are embedded; only the minimum amount of personal data is collected and processed for a specific purpose; there is a legal basis for processing personal data; and individuals whose personal data is being processed are provided with privacy notices.

The "About this resource" box in the top right hand corner of each model document sets out the latest updates and allows you to navigate to where our document has been amended in light of the introduction of the GDPR.

Adoption leave and pay


Criminal convictions

Disciplinary procedures

Equal opportunities

Exit interviews and separation questionnaires

Grievance procedures

Health and safety


Ordinary parental leave

Paternity leave and pay

Pay and benefits

Pregnancy and maternity leave and pay


Protecting your business





Right to request flexible working

Right to work in the UK

Shared parental leave and pay

Sickness and sick pay

Termination of employment

Time off work

Training and development

Transfer of undertakings


Use of technology and employee monitoring

Variation of contract



Working hours

New GDPR-compliant data protection documents