CDDA · YOUR WORKING TOOLKIT

Good questions. Strong records.

Blank templates to learn, prepare and document your work. Explore freely, without an account or paid membership.

01Read the lesson
02Use the worksheet
03Practise safely
04Discuss & review

How to use these templates

Choose a kit or search by task. Open the fields and checks, then download a text file or copy the template. Use fictional information for practice. Downloading submits nothing to the site. Keep completed records in the approved channel; mandates, reviews and permissions remain separate.

Register as a research volunteer for free →

The template library

4 templates shown ·Selected for this workflow.
G-06
Governance & people

Incident and conduct report

Record a concern fairly and without prejudgment.

Download .txt
Open fields and completion checks

Required fields

  1. Reporter and contact preference
  2. Date and location
  3. Specific conduct
  4. People involved
  5. Evidence preserved
  6. Immediate safety action
  7. Conflict check
  8. Response opportunity
  9. Findings
  10. Outcome and review

Completion checks

  • Need-to-know handling
  • No retaliation for good-faith reports
  • Use an uninvolved reviewer

Typical roles: people coordinator · governance officer · privacy officer

P-01
Privacy & security

Privacy impact screening

Identify privacy risk before a new activity or tool.

Download .txt
Open fields and completion checks

Required fields

  1. Activity and owner
  2. Purpose
  3. People affected
  4. Data elements
  5. Authority and consent
  6. Providers and locations
  7. Access
  8. Retention
  9. Risks and mitigations
  10. Approval

Completion checks

  • Minimize collection
  • Assess before launch
  • Escalate high-risk processing for full review

Typical roles: privacy officer · accessibility lead

P-02
Privacy & security

Access or correction request record

Track an individual’s privacy request.

Download .txt
Open fields and completion checks

Required fields

  1. Reference
  2. Requestor
  3. Request type
  4. Received date
  5. Identity verification method
  6. Records searched
  7. Exemptions considered
  8. Decision
  9. Response date
  10. Complaint route

Completion checks

  • Do not collect ID through ordinary forms
  • Track statutory deadlines where applicable
  • Record reasons for withheld material

Typical roles: privacy officer

P-03
Privacy & security

Security incident record

Coordinate containment, assessment and notification.

Download .txt
Open fields and completion checks

Required fields

  1. Discovery time
  2. Systems and records affected
  3. Containment
  4. People affected
  5. Information types
  6. Cause
  7. Real-risk assessment
  8. Legal reporting analysis
  9. Notifications
  10. Remediation and closure

Completion checks

  • Preserve necessary evidence
  • Do not delay required notice
  • Restrict incident details to the response team

Typical roles: privacy officer · administrator