Topic

Certifications

Certifications provide mechanisms for demonstrating that privacy, data protection, cybersecurity, or AI practices meet defined standards or criteria. Explore certification under the GDPR, including Articles 42 and 43 and the European Data Protection Seal, as well as certifications and assurance frameworks relevant to privacy, security, and AI governance. Coverage includes certification criteria, independent assessments, accountability, audits, international data transfers, and due diligence.

When Can Personal Data Leave the EU? A Practical Guide to GDPR International Transfers

A practical guide to GDPR international data transfers, explaining when personal data may leave the EEA and how adequacy decisions, appropriate safeguards, SCCs, BCRs, Transfer Impact Assessments, and Article 49 derogations enable lawful cross-border transfers.

Controller-to-Processor Transfers: What Article 28 GDPR Requires

A practical guide to Article 28 GDPR requirements for controller-to-processor relationships, covering mandatory contracts, processor due diligence, required terms, sub-processor authorization, liability, security, oversight, and the distinction from international data transfer rules.

Data Protection by Design and by Default Under the GDPR: What Article 25 Requires

Learn what data protection by design and by default means under Article 25 GDPR, including privacy-protective defaults, data minimization, risk-based safeguards, accountability, DPIAs, processor selection, and how organizations can build data protection into systems from the start.

Subscribe to The de la Torre Review