Preparing policies, procedures and user information

1. Regulatory Concept & Core Standards

This video focuses on how to organise the essential operating documentation for the channel. Follow the sequence of decisions in the example rather than simply memorising a list. Notice who is involved, what information is needed and the expected result. These points help turn the content into a practice that another person can verify. Setting up a channel involves people, procedures and technology. The platform supports operations, but the organisation still needs clear decisions on responsibilities, information protection and follow-up. This course covers preparing the service before receiving real reports.

User information explains what, where and how to report and how contact works. Internal procedures define handling; data-protection information serves a different purpose. Wording must match actual configuration. Article 13 requires a review of internal rules at least every three years and updates when necessary. Relevant change must not mechanically wait until that period ends.

Apply the following rule: The Commission for Personal Data Protection, CPDP/KZLD, is the central external reporting body and coordinates checks with competent authorities. Article 11 permits internal reporting, external reporting or both; the internal priority and exceptions for retaliation risk or ineffective handling do not create a universal prohibition on direct external reporting. The amendment published on 5 June 2026 changes article 20(3) on public positions and the Commission for Counteracting Corruption. Check current powers and transitional rules; CPDP remains the central external body. Public disclosure has separate conditions under article 7.

2. Practical Implementation & Procedure

Draft an accessible policy, an operating procedure and a responsibility matrix. Cover receipt, assessment, communications, conflicts, retention and closure. Check consistency between the wording and platform configuration. A deadline stated in the policy must match the deadline monitored in the system. Also provide clear information on external reporting as required by law. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

A policy promises that every anonymous message will be handled under ZZLPSPOIN, while the form requires identification. The team checks the law and corrects the information rather than removing a requirement simply to match an incorrect promise. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: How can you check whether the documentation describes the service a person will actually encounter? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

Go through the channel as a user and compare each step with the policy. Check mandatory fields, messages, follow-up methods and privacy information. Correct inconsistencies before launch.

One mistake to avoid is: publishing lengthy legal texts that omit simple instructions for using the service.

Now apply the national rule to a second decision. An advice page is presented as the sole destination for every report. What check is missing?

The recipient's powers and role must be confirmed. Advice, external receipt, investigation and protection may belong to different bodies. Also check the national conditions for the selected route. User information must help people find the correct procedure without requiring steps that do not exist in law.