Personal Data
GDPR DPO Designation: Article 37 Requirements Explained
When a DPO is mandatory under GDPR Article 37, how to appoint one, and recent EDPB enforcement findings.
September 8, 20267 min read
Privacy, risk and regulation
Privacy and compliance insights.
Practical analysis on GDPR, privacy operations, DORA, NIS2 and the EU AI Act.
Page 1 of 12 — newest 18 of 208 articles in English
Personal Data
DPO or compliance officer ?
Only the DPO is regulated by the GDPR. See how the Data Protection Officer differs from a compliance officer, when it is mandatory, and who appoints one.
September 8, 20267 min read
Data Privacy
GDPR Supervisory Authorities: Powers, Jurisdiction and Swiss Comparison
Understand GDPR supervisory authority powers, lead-authority rules and how Swiss FDPIC investigations and criminal fines differ.
September 8, 20268 min read
Data Privacy
What is the Principle of Accountability?
An in-depth analysis of the GDPR's principle of accountability, including legal references, case studies, and practical implementation tips.
September 8, 20268 min read
Data Privacy
GDPR Article 20: Data Portability Text, Scope and Export Workflow
Read Article 20 with its official source: consent or contract, automated processing, provided data, usable exports and the one-month response period.
September 8, 202610 min read
Data Privacy
GDPR Storage Limitation: Set Retention Rules and Verify Deletion
Article 5(1)(e) explained: purpose-based retention, justified periods, archives, backups, legal holds and a practical deletion-check example.
September 8, 20268 min read
Personal Data
Seven Data Privacy Principles: GDPR Article 5 in Practice
The seven GDPR principles explained through decisions, evidence and a hypothetical registration form: lawful basis, purpose, minimisation, accuracy, retention, security and accountability.
September 8, 202612 min read
Personal Data
GDPR Data Storage Requirements: Retention, Security and Hosting
Implement GDPR data storage requirements: lawful purpose, retention rules, security, backups, processor contracts, transfers and deletion evidence.
September 8, 202616 min read
Data privacy
Cyber privacy definition a clear and simple guide
Comprehensive guide to cyber privacy: definition, threats from AI and data brokers, IoT security, and practical defense strategies for your digital rights.
September 8, 202611 min read
Data Privacy
GDPR Fines Explained: Penalties, Examples, and How to Avoid Them
Understand how GDPR fines are calculated, see the largest penalties to date, and learn what steps your organisation should take to reduce enforcement risk.
September 8, 20266 min read
Data Privacy
GDPR Data Breach Notification: The 72-Hour Rule
Learn how GDPR data breach notification works, the 72-hour reporting rule, what to include, and how to avoid regulatory penalties.
September 8, 20267 min read
Data Privacy
Cookie Audit: How to Map Your Website's Cookies
Step-by-step guide to conducting a GDPR-compliant cookie audit. Covers discovery, classification, documentation, gap analysis, and ongoing monitoring.
September 8, 20266 min read
Data Privacy
Legiscope vs OneTrust: workflows, evidence and buying criteria
Compare documented workflows, product limits, first-year cost, migration and evidence with a practical purchasing checklist for Legiscope and OneTrust.
September 8, 20268 min read
Cybersecurity Regulation
NIS2 Essential vs Important Entities Explained
Learn how NIS2 classifies essential and important entities, which sectors fall under each category, size thresholds, and how obligations and penalties differ.
September 8, 20268 min read
AI Regulation
EU AI Act Timeline: Applicable Duties and 2027–2028 Deadlines
Current EU AI Act calendar: Article 50 transparency, GPAI transitions, December 2027 and August 2028 high-risk dates, and role-specific planning.
September 8, 202612 min read
GDPR Compliance
GDPR Compliance Cost: Build a Defensible Budget
Plan GDPR costs from scoped work, staffing, vendors, security and tooling. Includes a budget worksheet and a clearly hypothetical calculation.
September 8, 20268 min read
GDPR Compliance
Opt-In vs Opt-Out: Definitions, GDPR Rules and Examples
Opt-in means ask first; opt-out means stop on request. When GDPR requires each, with a comparison table and examples for email, cookies, calls and data sharing.
September 8, 202611 min read