Free Data Governance Templates

Data Governance: 40 free templates to browse without an account, then edit with an AI agent and e-sign in GitLaw.

This category provides frameworks for handling sensitive information across jurisdictions like the European Union, United States, and Canada. It includes specialized templates such as the HIPAA Business Associate Agreement for healthcare data and the California Resident Notice at Collection for CPRA compliance. Employment and account management records fall here, but generic commercial contracts reside in the main Business category.

  • 40 templates
  • Free to edit with AI
  • No account needed to browse
usa jurisdiction
FeaturedEuropean Union
Privacy Policy by Mozilla
This privacy policy template establishes how a company collects, uses, and protects personal information across its products and services. It defines personal information, outlines data collection methods like crash reports or browser checks, and specifies conditions for sharing data with third parties or government entities.
Updated 13 Aug 2026
FeaturedUS
Business Associate Agreement by Common Paper
This Business Associate Agreement (BAA) establishes legal safeguards for protected health information shared between a Provider and a Company. It defines breach notification protocols, sets restrictions on data offshoring and de-identification, and ensures compliance with HIPAA regulations.
Updated 13 Aug 2026
US
Other Site Policies Guidelines For Legal Requests Of User Data (GitHub)
These guidelines outline how a platform handles law enforcement requests for user data, including the legal standards required for disclosure and the types of information maintained. It details the specific requirements for subpoenas, court orders, and search warrants while establishing a policy of user notification.
Updated 13 Aug 2026
European Union
Privacy Policy (European Union) by Mozilla
This privacy policy governs the collection and use of personal data for proprietary software applications and web-based technologies. It outlines user account requirements, cookie usage preferences, and data sharing protocols with third-party service providers.
Updated 13 Aug 2026
US
Recruitment Privacy Policy (Basecamp)
This recruitment privacy policy informs job applicants about how their data is collected, stored, and managed during the hiring process. It covers data collection through applicant tracking systems, retention periods for candidates who reach interview stages, and procedures for data access or deletion.
Updated 13 Aug 2026
California (US)
California Resident Notice at Collection (CCPA) (Basecamp)
This privacy notice informs California residents about the personal information a business collects at or before the point of collection. It specifically outlines categories of data, purposes of use, and sharing practices to comply with the California Consumer Privacy Act (CCPA).
Updated 13 Aug 2026
US
Subscription Services and Privacy Notice by Mozilla
This privacy notice details how user data is collected and processed across specific Subscription Services such as VPN, account monitoring, and email/phone masking. It outlines data sharing practices with third-party partners like Mullvad, Stripe, and Twilio while providing opt-out mechanisms for telemetry and analytics.
Updated 13 Aug 2026
US
Ad-Targeting Guidelines by Mozilla
These guidelines establish privacy-focused rules for digital marketing campaigns, specifically prohibiting intrusive retargeting and cross-device tracking. It lists approved contextual and technical targeting methods for agencies working on behalf of a company.
Updated 13 Aug 2026
US
Websites, Communications & Cookies Privacy Notice by Mozilla
This privacy notice outlines how a company handles information collected through its websites, mobile apps, and digital communications. It covers data collection for job applications, contributor profiles, and payment processing while explaining the use of cookies and tracking tools.
Updated 13 Aug 2026
US
Incapacitated Policy (Basecamp)
This document outlines the procedure for managing or closing the account of a deceased or incapacitated user. It details the required legal documentation and verification steps for an authorized person to export data or cancel billing.
Updated 13 Aug 2026

GitLaw provides templates and tools, not legal advice. Templates are a starting point, not a substitute for advice on your situation - for anything significant, speak to a qualified lawyer.