{"content":{"layouts":[{"type":"singleColumn","areas":[{"items":[{"type":"Plain","cta":"","body":"\u003Cp\u003EFollowing the implementation of the Data (Use and Access) Act this toolkit is under review and will be updated over the coming months. For more information about the Data (Use and Access) Act\u0026nbsp;please\u00A0\u003Ca rel=\u0022noopener\u0022 href=\u0022https://ico.org.uk/about-the-ico/what-we-do/legislation-we-cover/data-use-and-access-act-2025/the-data-use-and-access-act-2025-what-does-it-mean-for-organisations/\u0022 target=\u0022_blank\u0022 title=\u0022The Data Use and Access Act 2025 (DUAA) - what does it mean for organisations? | ICO\u0022\u003Esee the ICO guidance\u003C/a\u003E.\u003C/p\u003E","link":null,"colour":"#006ddf","title":"","image":null,"imageFocus":"","imageId":0,"imageKey":"00000000-0000-0000-0000-000000000000","imageCrop":"","gridType":"card","gtmId":"","gtmClass":""},{"gridType":"RichTextBlock","content":"\u003Cp\u003EThis resource aims to provide local Scout Units with guidance on the creation of a data protection policy. A data protection policy is a document that explains to the data subject your data privacy stance, and is sometimes referred to as a privacy notice or privacy policy.\u003C/p\u003E\n\u003Cp\u003EA privacy statement, or just in time notice, is a paragraph appended to the data capture source (such as a form) that provides transparent detail on the data processing, this is covered in \u003Ca href=\u0022/volunteers/running-things-locally/gdpr-toolkit/step-5-gathering-data/\u0022 title=\u0022Step 5: Gathering data\u0022\u003EStep 5 \u2013 Gathering Data\u003C/a\u003E.\u003C/p\u003E\n\u003Cp\u003EA data protection policy breaks down into a number of statements that are answers to the questions around what data you process in Scouting, how you do it and why you need it. This should be made available to anyone who your local Scout Unit collects and processes data on. It can be a page on your local website if you have one and should be easy to find, such as a link from the front page or printed copies made available if you do not have a local website or for those without internet access. The core principle in action here is transparency.\u003C/p\u003E\n\u003Cp\u003EWe have provided a \u003Ca rel=\u0022noopener\u0022 href=\u0022https://prod-cms.scouts.org.uk//media/gw5esqec/guidance-template-for-creating-a-data-protection-policy.doc\u0022 target=\u0022_blank\u0022 title=\u0022Guidance Template For Creating A Data Protection Policy\u0022\u003EGuidance Template for Creating a Data Protection Policy\u003C/a\u003E. By using the wording within the resource, you should be able to construct your own data protection policy specific to your local Scout Unit. You will be required to add information specific to your local circumstances as well as removing some of the information which is not relevant to your local Scout Unit.\u003C/p\u003E\n\u003Cp\u003EInformation about how we process personal data at UK HQ can be found in \u003Ca href=\u0022/about-us/policy/data-protection-policy/\u0022 title=\u0022Data Protection Policy\u0022\u003EThe Scout Association\u0027s Data Protection Policy\u003C/a\u003E.\u003C/p\u003E","gtmId":"","gtmClass":""},{"type":"Promo","cta":"","body":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca rel=\u0022noopener\u0022 href=\u0022https://prod-cms.scouts.org.uk/media/gw5esqec/guidance-template-for-creating-a-data-protection-policy.doc\u0022 target=\u0022_blank\u0022 title=\u0022Guidance template for creating a data protection policy\u0022\u003EGuidance template for creating a data protection policy\u003C/a\u003E\u003C/li\u003E\n\u003C/ul\u003E","link":null,"colour":"#f1f1f1","title":"Useful resources for Step 10","image":null,"imageFocus":"","imageId":0,"imageKey":"00000000-0000-0000-0000-000000000000","imageCrop":"","gridType":"card","gtmId":"","gtmClass":""}]}],"config":null}]},"prev":{"link":"/volunteers/running-things-locally/gdpr-toolkit/step-9-third-parties/","title":"Step 9: Third parties"},"next":{"link":"/volunteers/running-things-locally/gdpr-toolkit/step-11-delete-and-destroy/","title":"Step 11: Delete and destroy"},"allParts":[{"link":"/volunteers/running-things-locally/gdpr-toolkit/introduction/","title":"Introduction"},{"link":"/volunteers/running-things-locally/gdpr-toolkit/step-1-what-do-i-need-to-know-about-data-protection/","title":"Step 1: What do I need to know about data protection?"},{"link":"/volunteers/running-things-locally/gdpr-toolkit/step-2-who-is-responsible-for-what/","title":"Step 2: Who is responsible for what?"},{"link":"/volunteers/running-things-locally/gdpr-toolkit/step-3-appointing-a-data-lead/","title":"Step 3: Appointing a Data Lead"},{"link":"/volunteers/running-things-locally/gdpr-toolkit/step-4-understanding-data-subjects-rights/","title":"Step 4: Understanding data subjects\u0027 rights"},{"link":"/volunteers/running-things-locally/gdpr-toolkit/step-5-gathering-data/","title":"Step 5: Gathering data"},{"link":"/volunteers/running-things-locally/gdpr-toolkit/step-6-data-discovery/","title":"Step 6: Data discovery"},{"link":"/volunteers/running-things-locally/gdpr-toolkit/step-7-keep-a-record/","title":"Step 7: Keep a record"},{"link":"/volunteers/running-things-locally/gdpr-toolkit/step-8-check-your-security/","title":"Step 8: Check your security"},{"link":"/volunteers/running-things-locally/gdpr-toolkit/step-9-third-parties/","title":"Step 9: Third parties"},{"link":"/volunteers/running-things-locally/gdpr-toolkit/step-10-publish-your-privacy-stance/","title":"Step 10: Publish your privacy stance"},{"link":"/volunteers/running-things-locally/gdpr-toolkit/step-11-delete-and-destroy/","title":"Step 11: Delete and destroy"},{"link":"/volunteers/running-things-locally/gdpr-toolkit/step-12-responding-to-a-breach/","title":"Step 12: Responding to a breach"},{"link":"/volunteers/running-things-locally/gdpr-toolkit/step-13-have-a-complaints-process/","title":"Step 13: Have a Complaints Process"}],"link":"/volunteers/running-things-locally/gdpr-toolkit/step-10-publish-your-privacy-stance/","id":47227,"nodeName":"Step 10: Publish your privacy stance","title":"Step 10: Publish your privacy stance","type":"codexPart","image":null,"assets":null,"headerOptions":{"headerTitle":"Step 10: Publish your privacy stance","headerSubTitle":null,"headerCta":null,"headerCtaText":null,"headerCtaLink":null,"headerBackgroundColour":null,"showSEOImage":false,"headerBackgroundImage":null,"quickLinks":null},"searchDescription":"","subHeader":"","browserTitle":null,"silktide":"eyJjbXMiOiJVbWJyYWNvIiwiZWRpdG9yVXJsIjoiaHR0cHM6Ly9wcm9kLWNtcy5zY291dHMub3JnLnVrLy91bWJyYWNvIy9jb250ZW50L2NvbnRlbnQvZWRpdC80NzIyNyJ9","canonicalUrl":"https://www.scouts.org.uk/volunteers/running-things-locally/gdpr-toolkit/step-10-publish-your-privacy-stance/"}