The template is written in the first person, as if the organisation was speaking directly to an individual e.g. "We collect your personal information when you ...." It refers to personal information rather than personal data since it applies to forms, printouts, notes and other paperwork as well as digital data on computer systems.
Given the compliance implications, this generic policy template must be customised and approved by competent specialist advisors familiar with the particular laws and regulations applicable to your organisation. This is a generic template, not legal advice.
Supplied as an MS Word document.
See also the policies on: