Templates

Document and justify why legitimate interest is the right legal basis for a data processing activity. Required before high-risk processing.

Monthly audit of employee record access and annual confirmation of labour law compliance.

Set data terms for entertainment platforms: control how your viewing history, preferences, and activity data are used and shared.

Delegate content moderation authority to a trusted team or AI agent. Define scope, escalation rules, and appeal procedures.

Set terms for how platforms use your content and audience data. Control monetisation data sharing, analytics access, and cross-platform portability.

Plan for what happens to your digital life. Transfer financial accounts to your executor, delete social media, and preserve your email archive for family.

Compile a cryptographically verifiable audit bundle every quarter for regulator submission. Every event is tamper-proof and independently verifiable.

FERPA-compliant consent for disclosure of education records. Includes all federally required disclosure elements: records specification, purpose, receiving parties, and parent/student rights notices.

HIPAA-aligned patient consent for sharing medical records.

Basic consent flow for sharing profile data.

Request a copy of all personal data held about you.

Set your own terms for who can access your data, what they can do with it, how long they can keep it, and what you get in return.

Agree on data availability, response times, and what happens when things go wrong. Both parties sign the same terms.

Multiple organisations share control of the same data. Equal voting rights, shared responsibilities, and clear withdrawal terms.

Give a parent or guardian bounded authority over a child's data. They can approve connections, view consent history, and manage profiles.

Let a caregiver manage subscriptions, file data requests, and handle billing on your behalf. Financial data is read-only.

Allow an AI agent to read your data but not change, share, or negotiate anything. The safest starting point for agent delegation.

If you're inactive for 60 days, your emergency contacts get read access to your applications — after a 72-hour cooldown period.

Monthly healthcare data checks: verify encryption, review access logs, track breach notifications, and confirm all Business Associate Agreements are current.

Publish a periodic report on how you handle data: requests received, data shared, breaches disclosed, and retention statistics.

Automated weekly check for mandate conflicts, consent violations, evidence gaps, and access anomalies. Issues are escalated immediately.

Request access to education records as a student or parent. Parental consent is required for students under 18.

Two universities share research data under peer governance. Either party can withdraw with 30-day notice. IRB approval required.

Lightweight consent for meetups and casual gatherings with photo sharing and code of conduct