Personal data
Data Minimization Under GDPR: Rules, Examples and Fines
Data minimization means collecting only what a purpose requires. Article 5(1)(c) explained: the three tests, field-by-field examples, CJEU rulings, fines.
July 30, 202612 min
Complete archive
English articles
Page 1 of 12
Personal Data
GDPR Compliance Guide 2026: 10 Obligations, Step by Step
GDPR compliance guide 2026: the 10 obligations in order — lawful basis, ROPA, notices, rights, DPIA, processors, transfers, security, breach, retention.
July 30, 202618 min
Data privacy
GDPR Consent Examples 2026: 12 Copy-Paste Wording Templates
12 GDPR consent examples: cookie banner, newsletter, marketing, profiling and special category wording, CNIL and AEPD tested, plus the fines you avoid.
July 30, 202616 min
Data Privacy
Right of Access Under GDPR (Article 15) Explained
Practical guide to GDPR right of access under Article 15 — what individuals can request, what to disclose, and how to respond compliantly.
July 30, 20268 min
GDPR Compliance
Opt-In vs Opt-Out: Definitions, GDPR Rules and Examples
Opt-in means ask first; opt-out means stop on request. When GDPR requires each, with a comparison table and examples for email, cookies, calls and data sharing.
July 30, 202612 min
Data Privacy
GDPR Consent Wording Examples: 8 Templates That Pass
GDPR consent wording examples: 8 copy-ready templates for cookies, newsletters, health data, children and sharing — plus the failures DPAs actually sanction.
July 30, 202611 min
Data Privacy
GDPR Compliance Framework: the 11 Deliverables, in Order
GDPR compliance framework: the 11 deliverables in build order — ROPA, lawful basis register, DPIA triggers, DPAs, transfer map, breach playbook, audit cycle.
July 30, 20264 min
AI Regulation
AI Act Compliance Software: EU Register & Risk Tools
AI Act compliance software compared for 2026: AI system register, risk classification, FRIA support and GPAI documentation, with vendor and pricing comparison.
July 30, 20267 min
AI Regulation
GDPR + AI Act Dual-Compliance Platforms: Cost & Vendors
GDPR + AI Act dual-compliance platforms in 2026: average EUR cost ranges by company size, named vendors, and what one tool must cover across both regulations.
July 30, 20267 min
Data Privacy
Australia–EU Data Transfers: Adequacy Status and SCCs
Australia has no EU adequacy decision. Which SCC module applies, how to run the transfer impact assessment against Australian government access powers, and the contract path for Australian vendors.
July 30, 20269 min
Data Privacy
Canada-EU Data Transfers: Adequacy Scope and SCCs
Canada's adequacy decision covers only recipients subject to PIPEDA. What falls outside it — public bodies, non-profits, some employee and health data — and when SCCs are required.
July 30, 20268 min
Data Privacy
India's DPDP Act 2023 vs GDPR: Key Differences
Consent and legitimate uses against six lawful bases, Consent Managers, the rights India's DPDP Act omits, the Data Protection Board, rupee penalties, and the phased commencement to May 2027.
July 30, 20269 min
GDPR Compliance
DPIA for Health Data: When It Is Required and What It Must Contain
Art. 35(3)(b) names large-scale Art. 9 processing, so a health DPIA is rarely optional. The Art. 35(7) content applied to a clinical system, WP248 criteria, Art. 36 prior consultation, and when to redo it.
July 30, 20269 min
Data Privacy
GDPR for Australian Companies: Does It Apply to You?
When the GDPR reaches an Australian business under Art. 3(2), the two scope tests applied to Australian fact patterns, the Art. 27 EU representative duty, and what non-compliance costs.
July 30, 202611 min
GDPR Compliance
GDPR for Canadian Companies: Does It Apply to You?
Canada's adequacy decision does not exempt Canadian companies from the GDPR. When Art. 3(2) applies, the Art. 27 EU representative duty, and what health data changes.
July 30, 20269 min
Data Privacy
GDPR Compliance Software for Australian Companies (2026)
Buying guide for Australian companies subject to the GDPR: EU hosting, Art. 30 records, DSAR workflow, Art. 27 representative arrangements, and dual Privacy Act + GDPR record-keeping.
July 30, 202610 min
Data Privacy
GDPR Compliance Software for Canadian Companies (2026)
Choosing GDPR compliance software in Canada: running Art. 30 records alongside PIPEDA and Quebec Law 25, bilingual output, three breach clocks, and what the market actually delivers.
July 30, 20268 min
Data Privacy
GDPR Compliance Software for Indian Companies (2026)
GDPR software for Indian IT-services firms: Art. 30(2) processor records per client, sub-processor management, DPA and SCC registers, and audit evidence for European client due diligence.
July 30, 20269 min