Free Data Governance Templates
Data Governance: 45 free templates to browse without an account, then edit with an AI agent and e-sign in GitLaw.
This category provides frameworks for handling sensitive information across jurisdictions like the European Union, United States, and Canada. It includes specialized templates such as the HIPAA Business Associate Agreement for healthcare data and the California Resident Notice at Collection for CPRA compliance. Employment and account management records fall here, but generic commercial contracts reside in the main Business category.
- 45 templates
- Free to edit with AI
- No account needed to browse
45 Data Governance contracts
usa jurisdiction
FeaturedUS
Privacy Policy (US) by OLL
This privacy policy outlines how a US-based entity processes personal data collected through digital services and offline interactions. It details specific consumer rights for residents of California, Colorado, Connecticut, and Virginia, including the right to opt out of data sales and profiling.
Updated 13 Aug 2026
FeaturedEuropean Union
Privacy Policy by Mozilla
This privacy policy template establishes how a company collects, uses, and protects personal information across its products and services. It defines personal information, outlines data collection methods like crash reports or browser checks, and specifies conditions for sharing data with third parties or government entities.
Updated 13 Aug 2026
FeaturedEuropean Union
Data Processing Agreement by Common Paper
This template establishes a framework for processing personal data between a service provider and a customer. It incorporates the Common Paper DPA Standard Terms and provides specific modules for EEA and UK data transfers.
Updated 13 Aug 2026
FeaturedUS
Business Associate Agreement by Common Paper
This Business Associate Agreement (BAA) establishes legal safeguards for protected health information shared between a Provider and a Company. It defines breach notification protocols, sets restrictions on data offshoring and de-identification, and ensures compliance with HIPAA regulations.
Updated 13 Aug 2026
US
Other Site Policies Guidelines For Legal Requests Of User Data (GitHub)
These guidelines outline how a platform handles law enforcement requests for user data, including the legal standards required for disclosure and the types of information maintained. It details the specific requirements for subpoenas, court orders, and search warrants while establishing a policy of user notification.
Updated 13 Aug 2026
European Union
Privacy Policy (European Union) by Mozilla
This privacy policy governs the collection and use of personal data for proprietary software applications and web-based technologies. It outlines user account requirements, cookie usage preferences, and data sharing protocols with third-party service providers.
Updated 13 Aug 2026
US
Recruitment Privacy Policy (Basecamp)
This recruitment privacy policy informs job applicants about how their data is collected, stored, and managed during the hiring process. It covers data collection through applicant tracking systems, retention periods for candidates who reach interview stages, and procedures for data access or deletion.
Updated 13 Aug 2026
California (US)
California Resident Notice at Collection (CCPA) (Basecamp)
This privacy notice informs California residents about the personal information a business collects at or before the point of collection. It specifically outlines categories of data, purposes of use, and sharing practices to comply with the California Consumer Privacy Act (CCPA).
Updated 13 Aug 2026
US
Subscription Services and Privacy Notice by Mozilla
This privacy notice details how user data is collected and processed across specific Subscription Services such as VPN, account monitoring, and email/phone masking. It outlines data sharing practices with third-party partners like Mullvad, Stripe, and Twilio while providing opt-out mechanisms for telemetry and analytics.
Updated 13 Aug 2026
US
Ad-Targeting Guidelines by Mozilla
These guidelines establish privacy-focused rules for digital marketing campaigns, specifically prohibiting intrusive retargeting and cross-device tracking. It lists approved contextual and technical targeting methods for agencies working on behalf of a company.
Updated 13 Aug 2026
GitLaw provides templates and tools, not legal advice. Templates are a starting point, not a substitute for advice on your situation - for anything significant, speak to a qualified lawyer.