Sign in Subscribe

Certifications

This tag covers certifications and assurance frameworks used to demonstrate compliance with privacy, data protection, cybersecurity, and AI governance requirements. It covers certification under the GDPR, including Articles 42 and 43 and the European Data Protection Seal, and the EU AI Act, as well as certifications relevant under other frameworks. Coverage includes certification criteria, conformity and independent assessments, audits, accountability, international transfers, and due diligence.

When Can Personal Data Leave the EU? A Practical Guide to GDPR International Transfers

When Can Personal Data Leave the EU? A Practical Guide to GDPR International Transfers

A practical guide to GDPR international data transfers, explaining when personal data may leave the EEA and how adequacy decisions, appropriate safeguards, SCCs, BCRs, Transfer Impact Assessments, and Article 49 derogations enable lawful cross-border transfers.

Controller-to-Processor Transfers: What Article 28 GDPR Requires

Controller-to-Processor Transfers: What Article 28 GDPR Requires

A practical guide to Article 28 GDPR requirements for controller-to-processor relationships, covering mandatory contracts, processor due diligence, required terms, sub-processor authorization, liability, security, oversight, and the distinction from international data transfer rules.

Data Protection by Design and by Default Under the GDPR: What Article 25 Requires

Data Protection by Design and by Default Under the GDPR: What Article 25 Requires

Learn what data protection by design and by default means under Article 25 GDPR, including privacy-protective defaults, data minimization, risk-based safeguards, accountability, DPIAs, processor selection, and how organizations can build data protection into systems from the start.