Collect less, explain more.
How to collect less data, answer visitor rights requests and write notices people understand, across Europe, the US and beyond.
GDPR
14 min read
A Record of Processing Activities (ROPA) is the document most organisations need under GDPR Article...
Read more
Privacy
13 min read
GDPR Article 22 bars decisions made solely by automated means that have legal or similarly significa...
Read more
GDPR
9 min read
A tracking tag that sends a health page's address with a cookie ID can create special category data...
Read more
Privacy
13 min read
Legitimate interest under GDPR Article 6(1)(f) covers processing such as fraud prevention and networ...
Read more
GDPR
14 min read
Under GDPR Article 33, a controller has 72 hours from becoming aware of a risky personal data breach...
Read more
GDPR
13 min read
As of October 2026, 17 European Commission adequacy decisions let personal data leave the EEA withou...
Read more
Privacy
13 min read
A data protection impact assessment is mandatory under GDPR Article 35 before processing that is lik...
Read more
GDPR
16 min read
The GDPR caps fines at EUR 20 million or 4% of worldwide annual turnover for the most serious infrin...
Read more
GDPR
14 min read
Data portability gives users the right to take their personal data out of your SaaS product in a str...
Read more
