��������Ƶ

1. International Data Transfers: Required when personal data may be transferred outside Pakistan, detailing the countries involved and safeguards in place

2. Automated Decision Making: Required when automated processing or profiling is involved, explaining the logic and consequences of such processing

3. Special Categories of Data: Required when collecting sensitive personal data such as health information, religious beliefs, or biometric data

4. Third-Party Sharing: Required when data will be shared with third parties, listing categories of recipients and purposes

5. Marketing Communications: Required when data will be used for marketing purposes, including opt-in/opt-out options

6. Children's Data Processing: Required when collecting data from minors, including parental consent requirements

1. Schedule A - Categories of Personal Data: Detailed breakdown of all personal data categories to be collected and processed

2. Schedule B - Technical and Organizational Security Measures: Detailed description of security measures implemented to protect personal data

3. Schedule C - Third Party Recipients: List of third parties with whom data may be shared, including their roles and responsibilities

4. Appendix 1 - Data Subject Rights Form: Template form for data subjects to exercise their rights (access, rectification, erasure, etc.)

5. Appendix 2 - Withdrawal of Consent Form: Template form for withdrawing consent for specific or all data processing activities