Sign in Subscribe

Topic

GDPR

A collection of 51 issues

The GDPR’s DPIA Requirement: Identifying, Assessing, and Mitigating High-Risk Processing

A practical guide to GDPR Data Protection Impact Assessments (DPIAs), explaining when they are required, the nine high-risk criteria, how to assess and mitigate risks, conduct a DPIA, document decisions, and determine when prior consultation is required.

Controller-to-Processor Transfers: What Article 28 GDPR Requires

A practical guide to Article 28 GDPR requirements for controller-to-processor relationships, covering mandatory contracts, processor due diligence, required terms, sub-processor authorization, liability, security, oversight, and the distinction from international data transfer rules.

Data Protection by Design and by Default Under the GDPR: What Article 25 Requires

Learn what data protection by design and by default means under Article 25 GDPR, including privacy-protective defaults, data minimization, risk-based safeguards, accountability, DPIAs, processor selection, and how organizations can build data protection into systems from the start.

What is the "Right to an Explanation" under the GDPR?

The GDPR gives individuals important rights when organizations rely on automated decision-making and profiling. Learn when Article 22 applies, the safeguards organizations must implement, and how individuals can challenge automated decisions.