GDPR Compliance Pack for Small Business — 14 editable EU GDPR document templates in Word and Excel
EU GDPRSMBs in or selling into the EU/UK

GDPR Compliance Pack for Small Business

14 editable GDPR documents — privacy notices, DSAR procedure, DPIA, breach response, processor DPA checklist — plus a pre-filled Records of Processing Activities (Art. 30) workbook and evidence checklist.

New to EU GDPR? Read our EU GDPR guide →

What's inside — 14 documents + 2 workbooks

  1. Data Protection Policy (.docx)
  2. Customer Privacy Notice (.docx)
  3. Employee Privacy Notice (.docx)
  4. Data Subject Rights Request Procedure (.docx)
  5. Lawful Basis Assessment Guide (.docx)
  6. Consent Management Policy (.docx)
  7. Data Protection Impact Assessment Procedure (.docx)
  8. Personal Data Breach Response Procedure (.docx)
  9. Processor and Vendor Management Policy (.docx)
  10. International Data Transfer Policy (.docx)
  11. Data Retention and Deletion Policy (.docx)
  12. Cookies and Tracking Policy (.docx)
  13. DPO Designation Assessment and Privacy Roles (.docx)
  14. Records of Processing Activities Standard (.docx)

Excel workbooks

  • Records of Processing Activities — GDPR Art. 30 (Excel)
  • Audit Evidence Checklist (Excel)
What's inside the GDPR Compliance Pack for Small Business — 14 compliance document templates
A look at what's inside the toolkit.

See the real content before you buy

We publish genuine excerpts — not marketing mockups. Read the opening sections of the Data Protection Policy exactly as you'll receive it:

Read the free preview

Frequently asked questions

Does this GDPR pack include Records of Processing Activities (Article 30)?
Yes. It includes a pre-structured RoPA workbook for Article 30, plus privacy notices, a data-subject-rights (DSAR) procedure, a DPIA procedure, a personal-data breach-response procedure and a processor/DPA checklist.
Does it cover UK GDPR as well as EU GDPR?
The documents are written for EU GDPR and note where the UK GDPR and the Data Protection Act 2018 apply, so businesses selling into both can adapt them quickly with find-and-replace.
Will this make us GDPR compliant on its own?
No. Compliance comes from how you actually process personal data. This pack gives you the documentation and records a supervisory authority, customer or auditor expects, which you then tailor and operate.
What format are the files and how are they delivered?
Editable Microsoft Word (.docx) and Excel (.xlsx) files, delivered as an instant download immediately after checkout. Organization-specific values are amber [bracketed placeholders] you replace with find-and-replace.
What licence do I get?
A single-organization licence. If you are a consultant or MSP intending to reuse the documents across multiple clients, contact us first for a fair multi-client arrangement.
$79

Secure Stripe checkout · instant download · no account required

By completing your purchase you agree to our Terms & License and Privacy Policy.

Professional editable templates — general information only, not legal, audit, tax, or certification advice, and no professional or advisory relationship is created. No purchase makes an organization compliant or certified. Review each document with qualified counsel, your compliance professional, or your auditor before relying on it. ISO, IEC, SOC 2, AICPA, HIPAA, NIST, GDPR, the EU AI Act, IRS and FTC are referenced descriptively only; ComplianceDocs (ExpertEngine LLC) is independent and is not affiliated with, endorsed by, or certified by any standards body, regulator, or audit firm.