GDPR & Data Protection

Data protection, mapped and manageable.

Run your GDPR registers and operational casework—from suppliers and RoPA to breaches, requests and complaints.

GDPR & Data Protection
GDPR & Data Protection in ChurchBase

RoPAProcessing activities

DPIAsRisk and mitigation

IncidentsBreach response

RequestsDeadline-led casework

What it actually covers

A complete gdpr & data protection workflow.

This is not a loose collection of uploads. ChurchBase gives the work a clear structure, keeps the evidence beside it and makes the next action visible.

  • ✓Supplier and DPA reviews
  • ✓Information asset register
  • ✓Records of Processing Activities
  • ✓Lawful basis and Article 9 conditions
  • ✓DPIA screening and approval
  • ✓Incidents and breach assessment
  • ✓Information requests and redaction
  • ✓Data complaints and ICO escalation
  • ✓Register and individual PDFs

Typical workflow

  1. 01Map your processing
  2. 02Assess suppliers and risk
  3. 03Handle live casework
  4. 04Review and evidence

Capability 01

Map data, processing and suppliers

Create connected supplier, information asset and RoPA registers. Record categories of data, data subjects, lawful basis, special-category conditions, recipients, international transfers, security and retention.

Capability 01Map data, processing and suppliers

  • ✓Supplier contracts and DPAs
  • ✓Information assets and owners
  • ✓RoPA activities
  • ✓Lawful basis and Article 9
  • ✓Retention and transfer safeguards

Capability 02

Assess change before it creates risk

Run DPIAs from screening through review and approval. Document necessity, proportionality, consultation, risks, mitigations and residual risk.

Capability 02Assess change before it creates risk

  • ✓DPIA references and owners
  • ✓Screening and consultation
  • ✓Risks and mitigations
  • ✓DPO or ICO consultation
  • ✓Approval and next review

Capability 03

Handle incidents, requests and complaints

Use structured workflows for incidents and breaches, information requests and data complaints—with deadlines, identity checks, searches, redaction, extensions, responses and ICO escalation.

Capability 03Handle incidents, requests and complaints

  • ✓ICO reporting assessment
  • ✓One-month request deadline
  • ✓Identity verification and searches
  • ✓Extensions and redaction
  • ✓Complaint findings and response

From £10 per month

Put your church’s compliance work in one clear system.

All features included. Unlimited users. Straightforward pricing based on regular attendance.