Data protection checklist for contractors
Thirteen checks to give a contractor access to personal data lawfully and safely, from the first decision to the confirmation of deletion.
Step by step
- 1Tick each item as you go: your progress is kept in this browser.
- 2Use the data processing addendum for the contract part.
- 3Copy the checklist into your project tool to share it.
Watch-outs
What changes from one country to another, with the legal source.
Processor contract, records of processing and impact assessments when required.
GDPR, art. 28, 30, 35Same obligations under the UK GDPR; the ICO publishes contract guidance.
UK GDPR; ICOOrganisations remain responsible for data processed by intermediaries on their behalf.
Personal Data Protection Act 2012, s 4(3)Legal references checked on 15 Oct 2026. Rules change: check the source before you rely on it.
Questions people ask
Is it free?
Yes. Every template is free to read and copy: no sign-up, no email, no download.