GDPR
14 min read
GDPR 72-hour breach notification rule and how to meet it
Under GDPR Article 33, a controller has 72 hours from becoming aware of a risky personal data breach...
Read moreGDPR
The GDPR, for your website.
Consent rules, lawful bases, visitor requests and the latest guidance from European regulators, written for the people who run websites.
Articles in GDPR
GDPR
GDPR
10 min read
Do you need a data protection officer under GDPR Article 37?
GDPR Article 37 makes a data protection officer mandatory for public bodies and for organisations wh...
Read more
GDPR
13 min read
Cross-border data transfers under GDPR and the adequacy list
As of October 2026, 17 European Commission adequacy decisions let personal data leave the EEA withou...
Read more
Privacy
13 min read
When do you need a data protection impact assessment (DPIA)?
A data protection impact assessment is mandatory under GDPR Article 35 before processing that is lik...
Read more
GDPR
8 min read
Data Processors vs Data Controllers: Understanding Your Role Under GDPR
Every organisation handling personal data under the GDPR acts as either a controller or a processor....
Read more
GDPR
16 min read
GDPR fines and how Article 83 penalties are calculated
The GDPR caps fines at EUR 20 million or 4% of worldwide annual turnover for the most serious infrin...
Read more
GDPR
14 min read
The Right to Data Portability: What It Means for Your SaaS Product
Data portability gives users the right to take their personal data out of your SaaS product in a str...
Read more
GDPR
11 min read
Data subject access requests (DSARs) under GDPR Article 15
Under GDPR Article 15, anyone can ask what personal data you hold about them and must get a copy wit...
Read more
GDPR
13 min read
Children's data and parental consent under GDPR Article 8
A child can consent to an online service alone from 16 under GDPR Article 8, or from 13, 14 or 15 wh...
Read more
