Contemporary data management relies on an ecosystem – a complex web along which personal information flows. GDPR obligations make it vital that external suppliers are following appropriate, documented procedures. This template, originally developed by the information strategy and governance team at Barclays, provides an essential checklist of the relevant information that data controllers should collect from data processors during onboarding.
Recognising that best practice in the onboarding of service providers is not a competitive issue, Barclays has released this template. As well as helping all of those involved in data management across the ecosystem to increase the transparency of their processes and reduce the time required to review and sign them off, we also hope it will play a part in raising levels of best practice and helping to standardise the complex and often duplicated approaches to this key element of data governance.