In certain situations, an Appropriate policy document (APD) will need to be in place before you process special category sensitive data or criminal offence data. An APD is a document outlining the organisation’s compliance measures and retention policies for these types of data.
For more information on when an APD is needed, read Appropriate policy documents.