GRCLibrary.ai

Charter

Privacy Management Programme Charter

This charter establishes the Privacy Management Programme: the organizational structure, accountabilities, and operating principles governing how personal data is collected, used, stored, disclosed, and disposed of across all jurisdictions. It creates the overarching framework within which the Privacy and Data Governance Policy, the Privacy Impact and Cross-Border Transfer Procedure, and the Data Subject Rights Management Procedure operate. The programme aligns to ISO/IEC 27701:2025, which is now a standalone Privacy Information Management System (PIMS) standard (the 2019 edition was an extension to ISO/IEC 27001; the 2025 revision restructured ISO/IEC 27701 as an independent standard; transition deadline October 2028).

Type
Charter
Version
1.5.24
Date
2026-11-07
Owner
Data Protection Officer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
Privacy
Review frequency
Annual and upon material privacy, regulatory, or AI governance change
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • Purpose
  • Scope
  • Privacy accountability structure
  • Privacy by design
  • Applicable regulatory obligations
  • Data breach response
  • Annual review
  • Framework alignment

Frameworks it maps to

Related documents