1. Special Categories of Personal Data: Additional section required if collecting sensitive data such as health information, biometric data, or religious beliefs

2. DIFC/ADGM Specific Provisions: Additional provisions required if the employer operates in DIFC or ADGM free zones

3. Monitoring and Surveillance: Required if the employer uses workplace monitoring systems or CCTV

4. Remote Working Data Processing: Required if employees work remotely and additional data processing occurs through remote working tools

5. Marketing and Communications: Required if employee data will be used for internal marketing or communications purposes

1. Schedule 1: Detailed Data Categories: Comprehensive list of all types of personal data collected, categorized by purpose and sensitivity

2. Schedule 2: Third Party Processors: List of authorized third-party data processors and their roles

3. Schedule 3: Data Retention Periods: Detailed breakdown of retention periods for different categories of personal data

4. Appendix A: Employee Rights Request Form: Standard form for employees to exercise their data subject rights

5. Appendix B: Data Breach Notification Procedure: Procedure to be followed in case of a data breach affecting employee data