Privacy documents and regulatory timelines
Browse privacy procedures, decision records, evidence requests and regulatory timelines for personal data protection.
Document how personal information is collected, used, shared, retained, and protected, with records of privacy decisions and requests.
Open Privacy templates in Sorena AI to search these titles and read the current template. The in-app catalog shows available revisions and withdrawn records. This title reference was reviewed on 27 October 2026.
The kind column identifies the starting content each entry creates. Review and adapt documents before use. Evidence requests describe records your organization needs to supply. See template kinds if you need help choosing between a document, evidence folder, and timeline.
California consumer privacy
CCPA and CPRA refer to the California Consumer Privacy Act and California Privacy Rights Act. DROP is California's Delete Request and Opt-out Platform.
| Template title | Kind |
|---|---|
| California privacy applicability register | Register |
| California financial incentive assessment register | Register |
| California consumer request metrics register | Register |
| California privacy risk assessment register | Register |
| California privacy risk assessment submission register | Register |
| California automated decisionmaking pre-use notice guidance | Guideline |
| California privacy risk assessment procedure | Procedure |
| California data broker and DROP procedure | Procedure |
| California automated decision rights-response register | Register |
| California data broker and DROP register | Register |
Children's privacy under COPPA
COPPA is the US Children's Online Privacy Protection Act. FTC means Federal Trade Commission.
| Template title | Kind |
|---|---|
| Children's service applicability procedure | Procedure |
| Parent notice and consent-request guidance | Guideline |
| Verifiable parental consent procedure | Procedure |
| Children's collection exception register | Register |
| Children's privacy safe harbor procedure | Procedure |
| Voluntary FTC approval request procedure | Procedure |
| Children's privacy implementation evidence | Evidence folder |
Electronic communications privacy
| Template title | Kind |
|---|---|
| Electronic communications applicability register | Register |
| Terminal-equipment access procedure | Procedure |
| Device-access and choice register | Register |
| Communications privacy procedure | Procedure |
| Electronic direct-marketing procedure | Procedure |
| Electronic marketing permissions and suppression register | Register |
| Electronic communications authority breach-notice register | Register |
| Electronic communications subscriber breach-notice register | Register |
Privacy and personal data protection
| Template title | Kind |
|---|---|
| Personal-data breach notification procedure | Procedure |
| Personal data retention standard | Standard |
| Privacy evidence request | Evidence folder |
| Privacy improvement plan | Plan |
| Privacy notice and transparency policy | Policy |
| Privacy management procedure | Procedure |
| Privacy contacts register | Register |
| Privacy controls standard | Standard |
| Controller processing activities register | Register |
| Processor processing activities register | Register |
| Data subject rights and privacy requests procedure | Procedure |
| Data subject requests register | Register |
| Data protection impact assessment procedure | Procedure |
| Data protection impact assessment register | Register |
| International personal-data transfers procedure | Procedure |
| International data transfers register | Register |
| Consent management procedure | Procedure |
| Consent and permission records register | Register |
| Data protection officer appointment and operation procedure | Procedure |
| Legitimate interests assessments register | Register |
| Data protection representative mandate register | Register |
| Data protection prior consultation register | Register |
| Data protection impact assessment report register | Register |
| Binding corporate rules for covered group transfers | Policy |
| Privacy Framework profiles register | Register |
| Data location register | Register |
| Data processing contract terms standard | Standard |
| Data processing agreements register | Register |
| Signed data processing agreements evidence request | Evidence folder |
| Privacy practices assessment procedure | Procedure |
| Privacy practices assessment results register | Register |
EU ePrivacy Directive 2002/58/EC
| Template title | Kind |
|---|---|
| EU ePrivacy Directive regulatory timeline | Timeline |
EU GDPR 2016/679
GDPR means General Data Protection Regulation.
| Template title | Kind |
|---|---|
| EU GDPR regulatory timeline | Timeline |
UK GDPR and DPA 2018
DPA means Data Protection Act.
| Template title | Kind |
|---|---|
| UK GDPR and Data Protection Act regulatory timeline | Timeline |
US CCPA/CPRA 2026
| Template title | Kind |
|---|---|
| California CCPA and CPRA regulatory timeline | Timeline |
US COPPA
| Template title | Kind |
|---|---|
| US COPPA regulatory timeline | Timeline |
United Kingdom privacy and data protection
| Template title | Kind |
|---|---|
| UK appropriate policy document | Policy |
| UK children's privacy procedure | Procedure |
| UK significant automated-decision procedure | Procedure |
| UK law-enforcement processing procedure | Procedure |
| UK intelligence-services data-protection procedure | Procedure |
| UK Children's Code impact assessment register | Register |
| UK restricted-transfer data protection test register | Register |
| UK data-sharing request record | Register |
| UK data-sharing decision and disclosure log | Register |
| UK significant automated-decision register | Register |
| UK DPA 2018 processing condition and exemption register | Register |
| UK Part 3 law-enforcement processing register | Register |
| UK Part 4 intelligence-services processing register | Register |
Create content from a catalog entry
Open the relevant requirement in your management system, review its expected content, and choose an eligible destination project. Follow Create IMS documents and evidence folders for creation, reuse, and preview steps. Read the catalog guide for framework coverage and the other organizational domains.
Screenshots show a demo workspace.
Legal documents and regulatory timelines
Browse compliance procedures, legal registers and regulatory timelines for reporting, data sharing and legal obligations.
People policies and records
Browse staff policies, training records and procedures for recruitment, working arrangements and employment changes.