Data Security: Staff Acknowledgement Record

Staff Acknowledgement Record

Purpose
To evidence that each staff member has read, understood, and agreed to comply with the Data Security Policy (and related policies). This record satisfies the mandatory evidence requirement for Standard 2 [1] and can also be used to support Standard 3 (training) and Standard 1 (confidentiality).

Template (for use in HR or personnel files)

DATA SECURITY POLICY ACKNOWLEDGEMENT FORM
[Your Organisation Name]

I confirm that I have received, read, and understood the Data Security Policy (version 1.0, [Date]).

I understand my responsibilities as outlined in the policy, including:

• Protecting the confidentiality, integrity, and availability of data.
• Reporting any suspected breaches immediately.
• Completing annual data security training.
• Using organisation systems and data only for authorised purposes.

I agree to comply with this policy and acknowledge that non‑compliance may result in disciplinary action.

Name: __________________________________
Job Title: ______________________________
Signature: ______________________________
Date: __________________________________

Line Manager (if applicable):
I confirm that I have discussed the policy with the above‑named individual and that they have received appropriate induction.
Signature: ______________________________ Date: _____________

Acknowledgement Log (central record)

Process

• New starters sign the form on their first day, before receiving system access.
• Existing staff re‑acknowledge the policy annually (can be combined with the annual training completion).
• The log is maintained by HR or the DPO.

These drafts are ready to be adopted with your organisation’s details. If you wish, I can also add a clause referencing the Incident Response Procedure (Standard 6) or link to your Business Continuity Plan (Standard 7) once we create those documents.