Do I need a written data protection policy?

It very much depends on what you do in your business.

If, for example, you process personal data on behalf of other businesses then it makes good sense. It demonstrates that you are aware of the legal requirements and that you take appropriate care of their data. This can help give confidence and reassure them that you are the right person to handle their data.

If you have employees it sets the scene and explains your thoughts on how personal data should be handled.

If you have any doubts about data protection then check out our Data Protection MOT, it may be just what you need?