11 · Decision gate

Record the governance decision

Record a proportionate, evidence-based decision. There is no automatically correct option; the decision must follow from the evidence and say what remains uncertain.

LEGAL AND REGULATORY TOUCHPOINTS

Points to raise with specialists

UK GDPR: lawful basis, transparency, data minimisation, retention and security for employee data; a DPIA is expected for high-risk processing.
Personal data breaches may need reporting to the regulator within 72 hours; assess INC-2 promptly.
International transfers: check the supplier's sub-processors and transfer safeguards.
Employment and equality law: wrong advice on leave or adjustments could lead to unlawful treatment of employees.
Collective consultation obligations may be affected by premature disclosure of redundancy plans.
These are pointers for discussion, not legal advice.

Governance Decision Record

This leads your report.

Recommendation

Reasoning (150–250 words)

Balance the benefit, the harm to affected people, the evidence available and the uncertainty that remains.

Evidence the decision relies on

What did you see, not merely what you were told?

What remains uncertain

Assumptions and evidence gaps that could change the decision

Conditions, restrictions and stop conditions

What must be true for the decision to stand?

Monitoring after the decision

Measures, thresholds, review cadence and owners

Who approves

Accountable role with authority

Review date

When the decision will be revisited

Answers save automatically and sync to your account when you are signed in.