Framework template
The EU regulation governing how organisations collect, process, store and share the personal data of people in the EU, wherever the organisation is based.
Bundled template
GDPR Compliance
40 controls · 8 categories
| Control | Category |
|---|---|
| GDPR-5.1aLawfulness, Fairness, Transparency | Principles |
| GDPR-5.1bPurpose Limitation | Principles |
| GDPR-5.1cData Minimization | Principles |
| GDPR-5.1dAccuracy | Principles |
| GDPR-5.1eStorage Limitation | Principles |
| GDPR-5.1fIntegrity and Confidentiality | Principles |
| GDPR-5.2Accountability | Principles |
| GDPR-6.1Lawful Basis for Processing | Lawful Basis |
| and 32 more | |
General Data Protection Regulation
In practice
GDPR sets out lawful bases for processing, the rights of data subjects, accountability duties such as records of processing and impact assessments, and a 72-hour window for notifying a supervisory authority of a breach.
Requirements
01
A documented legal ground (consent, contract, legal obligation, legitimate interest and the others) for every processing activity.
02
Procedures for access, rectification, erasure, portability and objection requests, answered within the statutory time.
03
Impact assessments, data minimisation and security measures built into systems from the start.
04
Notification to the supervisory authority within 72 hours, and to affected individuals where the risk is high.
How the Desk helps
Each step below is shipped: the template import in Compliance Studio, and workflows that run over the documents you choose, record their sources and hold for approval before export.
Run Extract obligations over the regulation, your privacy notices and your processing agreements. The run records every source it read and holds for approval.
Run Review controls over the policies and procedures that answer the template's controls; a control memo names the gaps.
Evidence is held per control with an owner and a status. Prepare audit checklist runs over the documents you select for an inspection or an internal review, exported once approved.
Other templates
Next step
Bring the policies you have and the last audit's request list. We will import the template, run the workflows with you and hand back the controls, the evidence on file and each run's sources.
Security
GDPR and CCPA compliant, ISO 27001 aligned, SOC 2 Type II in progress. Encrypted at rest and in transit. Your data never trains a model.
Security page