1. International Data Transfers: Required if personal information is transferred across borders, detailing transfer mechanisms and safeguards

2. Industry-Specific Requirements: Needed for organizations in regulated sectors like healthcare or finance, addressing sector-specific privacy requirements

3. Children's Privacy: Required if services are offered to or data is collected from children under 13

4. Automated Decision Making: Needed if organization uses automated processing or AI systems for decision-making

5. Cookie Policy: Required for organizations with web presence, detailing use of cookies and similar technologies

6. Marketing Communications: Needed if personal information is used for marketing purposes, addressing CASL compliance

7. Employee Data Handling: Required if policy also covers employee personal information

1. Schedule A - Data Categories and Retention Periods: Detailed list of personal information categories collected and their specific retention periods

2. Schedule B - Security Standards and Procedures: Technical specifications for data security measures and detailed security procedures

3. Schedule C - Privacy Breach Response Plan: Detailed procedures and contact information for privacy breach response

4. Schedule D - Consent Forms: Templates for various consent forms used by the organization

5. Schedule E - Data Subject Request Forms: Standard forms for access requests, correction requests, and consent withdrawals

6. Appendix 1 - Third Party Processors: List of approved third-party service providers and their privacy compliance status

7. Appendix 2 - Privacy Impact Assessment Template: Template and guidelines for conducting privacy impact assessments