Page 6 of 12
Read Article 20 with its official source: consent or contract, automated processing, provided data, usable exports and the one-month response period.
Article 5(1)(e) explained: purpose-based retention, justified periods, archives, backups, legal holds and a practical deletion-check example.
The seven GDPR principles explained through decisions, evidence and a hypothetical registration form: lawful basis, purpose, minimisation, accuracy, retention, security and accountability.
Implement GDPR data storage requirements: lawful purpose, retention rules, security, backups, processor contracts, transfers and deletion evidence.
Comprehensive guide to cyber privacy: definition, threats from AI and data brokers, IoT security, and practical defense strategies for your digital rights.
Understand how GDPR fines are calculated, see the largest penalties to date, and learn what steps your organisation should take to reduce enforcement risk.
Learn how GDPR data breach notification works, the 72-hour reporting rule, what to include, and how to avoid regulatory penalties.
Step-by-step guide to conducting a GDPR-compliant cookie audit. Covers discovery, classification, documentation, gap analysis, and ongoing monitoring.
Compare documented workflows, product limits, first-year cost, migration and evidence with a practical purchasing checklist for Legiscope and OneTrust.
Learn how NIS2 classifies essential and important entities, which sectors fall under each category, size thresholds, and how obligations and penalties differ.
Current EU AI Act calendar: Article 50 transparency, GPAI transitions, December 2027 and August 2028 high-risk dates, and role-specific planning.
Plan GDPR costs from scoped work, staffing, vendors, security and tooling. Includes a budget worksheet and a clearly hypothetical calculation.
Opt-in means ask first; opt-out means stop on request. When GDPR requires each, with a comparison table and examples for email, cookies, calls and data sharing.
Compare SCCs, BCRs and DPF by legal scope, recipient coverage, evidence, transfer assessment and ongoing review. Includes a hypothetical decision file.
GDPR data controller vs processor: definitions, decision criteria, contractual implications. With 8 real-world scenarios from cloud services to analytics.
ROPA template for GDPR Article 30: controller and processor fields, hypothetical HR, marketing and analytics entries, and an evidence-based review workflow.
Article 14 explained: indirectly collected data, first communication or disclosure, the one-month backstop, source information and four exceptions.
GDPR Article 18 gives data subjects the right to restrict processing in 4 cases. Practical implementation, technical measures, and DPA enforcement.