Page 2 of 12
Article 24 requires controllers to implement, demonstrate, review and update proportionate GDPR measures. Learn what evidence to keep and how it differs from Articles 25 and 32.
Work out when high residual risk calls for GDPR Article 36 consultation, what to submit, how the authority's advice works and what to record.
Understand GDPR Article 83 fine ceilings, case-by-case factors, linked infringements, undertaking turnover and the EDPB's calculation guidance.
Compare Swiss FADP Article 24 and GDPR Articles 33–34: reporting thresholds, timing, notices to people, authorities and the distinct Swiss criminal-offence rules.
GDPR Article 20 explained: provided and observed data, access versus portability, reusable formats, direct transfer, third-party rights and request deadlines.
Read GDPR Article 33 accurately: awareness, the 72-hour authority notification, risk threshold, phased information and breach documentation.
Article 39 gives a data protection officer five listed tasks and a risk-based approach. Learn what the DPO advises, monitors and handles with the authority.
Read GDPR Article 5(1)(e): purpose-based retention, legal obligations, Article 89 safeguards, anonymisation, backups, records and erasure requests.
Use GDPR Articles 5(1)(b), 5(1)(c), 6(4) and 89 to define purposes, justify fields and assess a proposed reuse of personal data.
Apply GDPR data minimisation and storage limitation together: necessary fields, access, retention stages, copies, backups, suppliers and individual rights.
Choose GDPR supplementary measures using the seven EDPB use cases: encryption, pseudonymisation, protected recipients, cloud access and evidence.
Choose GDPR software for a French organisation using CNIL record and DPIA guidance, French-language evidence, workflow tests, transfer review and complete-cost questions.
Choose GDPR software for a Spanish SME: LOPDGDD, records, DPO duties, workplace rules, rights, retention, supplier checks and comparable costs.
How to maintain DORA's ICT third-party register using the 2024/2956 templates, validate linked data and decide whether a spreadsheet or software fits.
A startup buyer's guide to GDPR tools: map controller and processor duties, trial free records and DPIA templates, then test software on your real workflows.
An onboarding condition tracker linking a supplier security gap to interim protection, owner, deadline, closure test and a recorded service decision.
Define GDPR processing purposes, apply the Article 6(4) compatibility test and document lawful changes, notices, safeguards and retention.
Understand the EDPB’s membership, guidelines, opinions and binding decisions, its relationship with national regulators, and how to use its work in GDPR compliance.