{"text_format":"1","workbook":"xlsx","n_sheets":1,"sheets":["7.Lawful Processing Records"],"not_rendered":{"charts":0,"images":2,"macros":1,"external_links":0,"defined_names":7,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"7.Lawful Processing Records","index":0,"n_rows":22,"n_cols":19,"rows_kept":22,"cut":false,"hidden":false,"merged":[[1,1,5,2],[9,1,10,2],[7,1,7,2]]}
[]
[null,"PURPOSE : The purpose of this form is to capture the lawful reason you are relying on for the data you are capturing / storing / transferring."]
[null,null,null,null,null,null,null,"GDPR PROCESSING RECORDS"]
[]
[]
[null,null,null,null,"SYSTEM OR PROCESS","The name and contact details of the controller, the controller's representative and the data protection officer; ","The purposes of the processing; ","A description of the categories of data subjects and of the categories of personal data; ","Examples of the data captured that drives the data categorisation","Where possible, the envisaged time limits for erasure of the different categories of data; ","Lawful Process Article","Lawful Process Description","Approved by and when",null,null,"Data Type","Lawful Process Article","Lawful Process Description","General Description and example"]
[null,null,null,null,"This is the system or process as identified in the Data Inventory Tab.","This will be the top level of the trust/charity that is responsible for governance","This is the purpose for the processing as identified in the Data Inventory Tab","This is classification of the data in the process as identified in the Data Inventory Tab","Add the types of personal data involved in this process, add all that apply","This is the retention period for the data in this process as defined in the Data Inventory Tab","The Lawful Process is the justification for the data process. This needs to be selected to match the applicable description in the table to the right","The description that matches the Lawful Process Article will be auto populated when you select the appropriate article ID","Add the approver of this Lawful process from the executive committee and date of approval",null,null,"Personal Data","6(1)(a)","Consent of the data subject","The individual who's personal data is in question has given you consent to carry out the process"]
[null,"Please watch this video in advance of completing this sheet.",null,null,{"$f":"#REF!","v":{"$error":"#REF!"}},"Executive Committee - NAMED INDIVIDUAL",{"$f":"#REF!","v":{"$error":"#REF!"}},{"$f":"#REF!","v":{"$error":"#REF!"}},"Name, DOB, Address, Health, Religion, Ethnicity",{"$f":"#REF!","v":{"$error":"#REF!"}},"9(2)(c)",{"$f":"VLOOKUP(K8,$Q$7:$R$22,2,FALSE)","v":"Processing is  necessary to protect the vital interests of a data subject or another individual where the data subject is physically or legally incapable of giving consent"},"TBA",null,null,"Personal Data"," 6(1)(b)","Processing is necessary for the performance of a contract with the data subject or to take steps to enter into a contract","The personal data on the individual is necessary for a contract purpose, such as data required to fulfil a warranty when purchasing an item"]
[null,null,null,null,{"$f":"#REF!","v":{"$error":"#REF!"}},"Executive Committee - NAMED INDIVIDUAL",{"$f":"#REF!","v":{"$error":"#REF!"}},{"$f":"#REF!","v":{"$error":"#REF!"}},"Name, DOB, Address, Health, Religion, Ethnicity",{"$f":"#REF!","v":{"$error":"#REF!"}},"9(2)(e)",{"$f":"VLOOKUP(K9,$Q$7:$R$22,2,FALSE)","v":"Processing relates to personal data manifestly made public by the data subject"},"TBA",null,null,"Personal Data"," 6(1)(c)","Processing is necessary for compliance with a legal obligation","Legal obligations supersede GDPR where appropriate, this could include things such as DBS checks"]
[null,"This form is mostly pre populated from the Data Inventory tab, these fields are in bold italics. All other fields are editable and require completing",null,null,{"$f":"#REF!","v":{"$error":"#REF!"}},"Executive Committee - NAMED INDIVIDUAL",{"$f":"#REF!","v":{"$error":"#REF!"}},{"$f":"#REF!","v":{"$error":"#REF!"}},"Name, DOB, Address, Health, Religion, Ethnicity",{"$f":"#REF!","v":{"$error":"#REF!"}},"9(2)(a)","Explicit consent of the data subject, unless reliance on consent is prohibited by EU or Member State law","TBA",null,null,"Personal Data","6(1)(d)","Processing is  necessary to protect the vital interests of a data subject or another person","An example of vital interests would be retaining somebodies details post a purchase in case of product recall"]
[null,null,null,null,{"$f":"#REF!","v":{"$error":"#REF!"}},"Executive Committee - NAMED INDIVIDUAL",{"$f":"#REF!","v":{"$error":"#REF!"}},{"$f":"#REF!","v":{"$error":"#REF!"}},"Name, DOB, Address, Health, Religion, Ethnicity",{"$f":"#REF!","v":{"$error":"#REF!"}},"9(2)(a)","Explicit consent of the data subject, unless reliance on consent is prohibited by EU or Member State law","TBA",null,null,"Personal Data"," 6(1)(e)","Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller","The data held is required to perform duties of public interest, such as reporting crimes"]
[null,null,null,null,{"$f":"#REF!","v":{"$error":"#REF!"}},"Executive Committee - NAMED INDIVIDUAL",{"$f":"#REF!","v":{"$error":"#REF!"}},{"$f":"#REF!","v":{"$error":"#REF!"}},"Name, DOB, Address",{"$f":"#REF!","v":{"$error":"#REF!"}},"9(2)(h)","Processing is necessary for the purposes of preventative or occupational medicine, for assessing the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or management of health or social care systems and services on the basis of Union or Member State law or a contract with a health professional","TBA",null,null,"Personal Data"," 6(1)(f )","Necessary for the purposes of legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject","Legitimate interest is where your requirement to have data overrides objections from the data subject, such as data pertaining to safeguarding"]
[null,null,null,null,{"$f":"#REF!","v":{"$error":"#REF!"}},"Executive Committee - NAMED INDIVIDUAL",{"$f":"#REF!","v":{"$error":"#REF!"}},{"$f":"#REF!","v":{"$error":"#REF!"}},"Name, DOB, Address, Health, Religion, Ethnicity",{"$f":"#REF!","v":{"$error":"#REF!"}}," 6(1)(f )","Necessary for the purposes of legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject","TBA",null,null,"Sensitive Personal","9(2)(a)","Explicit consent of the data subject, unless reliance on consent is prohibited by EU or Member State law","Where sensitive data is involved explicit consent is required from the data subject or parental guardian, such as medical records"]
[null,null,null,null,{"$f":"#REF!","v":{"$error":"#REF!"}},"Executive Committee - NAMED INDIVIDUAL",{"$f":"#REF!","v":{"$error":"#REF!"}},{"$f":"#REF!","v":{"$error":"#REF!"}},"Name, DOB, Address, Health, Religion, Ethnicity",{"$f":"#REF!","v":{"$error":"#REF!"}},"9(2)(c)","Processing is  necessary to protect the vital interests of a data subject or another individual where the data subject is physically or legally incapable of giving consent","TBA",null,null,"Sensitive Personal","9(2)(b)","Processing is necessary for carrying out obligations under employment, social security or social protection law, or a collective agreement","Where sensitive data is required to fulfil an obligation with an employee, such as health details for a pension"]
[null,null,null,null,{"$f":"#REF!","v":{"$error":"#REF!"}},"Executive Committee - NAMED INDIVIDUAL",{"$f":"#REF!","v":{"$error":"#REF!"}},{"$f":"#REF!","v":{"$error":"#REF!"}},"Name, DOB, Address, Health, Religion, Ethnicity",{"$f":"#REF!","v":{"$error":"#REF!"}}," 6(1)(f )","Necessary for the purposes of legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject","TBA",null,null,"Sensitive Personal","9(2)(c)","Processing is  necessary to protect the vital interests of a data subject or another individual where the data subject is physically or legally incapable of giving consent","The vital interests of the subject require you to have this data, such as allergies for dietary requirements"]
[null,null,null,null,{"$f":"#REF!","v":{"$error":"#REF!"}},null,{"$f":"#REF!","v":{"$error":"#REF!"}},{"$f":"#REF!","v":{"$error":"#REF!"}},null,{"$f":"#REF!","v":{"$error":"#REF!"}},null,{"$error":"#N/A"},"TBA",null,null,"Sensitive Personal","9(2)(d)","Processing carried out by a not-for-profit body with a political, philosophical, religious or trade union aim provided the processing relates only to members or former members (or those who have regular contact with it in connection with those purposes) and provided there is no disclosure to a third party without consent","Necessary for the processing of data as part of a Not For Profit organisation based on a philosophical, religious, political trade union aim"]
[null,null,null,null,{"$f":"#REF!","v":{"$error":"#REF!"}},null,{"$f":"#REF!","v":{"$error":"#REF!"}},{"$f":"#REF!","v":{"$error":"#REF!"}},null,{"$f":"#REF!","v":{"$error":"#REF!"}},"9(2)(h)","Processing is necessary for the purposes of preventative or occupational medicine, for assessing the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or management of health or social care systems and services on the basis of Union or Member State law or a contract with a health professional",null,null,null,"Sensitive Personal","9(2)(e)","Processing relates to personal data manifestly made public by the data subject","This information is already in the public domain and published by the data subject"]
[null,null,null,null,{"$f":"#REF!","v":{"$error":"#REF!"}},null,{"$f":"#REF!","v":{"$error":"#REF!"}},{"$f":"#REF!","v":{"$error":"#REF!"}},null,{"$f":"#REF!","v":{"$error":"#REF!"}},"9(2)(h)","Processing is necessary for the purposes of preventative or occupational medicine, for assessing the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or management of health or social care systems and services on the basis of Union or Member State law or a contract with a health professional",null,null,null,"Sensitive Personal","9(2)(f)","Processing is necessary for the establishment, exercise or defence of legal claims or where courts are acting in their judicial capacity","To fight legal claims on the data subjects behalf this information is required"]
[null,null,null,null,{"$f":"#REF!","v":{"$error":"#REF!"}},null,{"$f":"#REF!","v":{"$error":"#REF!"}},{"$f":"#REF!","v":{"$error":"#REF!"}},null,{"$f":"#REF!","v":{"$error":"#REF!"}},"9(2)(h)","Processing is necessary for the purposes of preventative or occupational medicine, for assessing the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or management of health or social care systems and services on the basis of Union or Member State law or a contract with a health professional",null,null,null,"Sensitive Personal","9(2)(g)","Processing is necessary for reasons of substantial public interest on the basis of Union or Member State law which is proportionate to the aim pursued and which contains appropriate safeguards","Substantial public interest may be informing authorities of an individual that poses a threat."]
[null,null,null,null,{"$f":"#REF!","v":{"$error":"#REF!"}},null,{"$f":"#REF!","v":{"$error":"#REF!"}},{"$f":"#REF!","v":{"$error":"#REF!"}},null,{"$f":"#REF!","v":{"$error":"#REF!"}},"9(2)(h)","Processing is necessary for the purposes of preventative or occupational medicine, for assessing the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or management of health or social care systems and services on the basis of Union or Member State law or a contract with a health professional",null,null,null,"Sensitive Personal","9(2)(h)","Processing is necessary for the purposes of preventative or occupational medicine, for assessing the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or management of health or social care systems and services on the basis of Union or Member State law or a contract with a health professional","The sensitive data is required to assess the individuals ability to carry out their duties and respond to their medical needs if necessary"]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Sensitive Personal","9(2)(i)","Processing is  necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of healthcare and of medicinal products or medical devices","Substantial public interest may be informing authorities of an outbreak of a contagious disease, sensitive data will be required for this"]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Sensitive Personal","9(2)(j)","Processing is necessary for archiving purposes in the public interest, or scientific and historical research purposes or statistical purposes in accordance with Article 89(1)","The sensitive data is required to maintain records that are required for research purposes and historical importance"]