Skip to content
PrivacyEuropean Union

GDPR

What is GDPR?

General Data Protection Regulation - EU regulation on data protection and privacy for all individuals within the European Union and European Economic Area. It comprises 41 controls organised across 5 domains, published by European Union, and applies in the European Union.

How GDPR maps to other frameworks

All 41 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.

See the control mappings →

The 5 domains GDPR groups its controls into

Chapter II - Principles
International Transfers
DPO
DPIA
Breach Notification

Frameworks that share controls with GDPR

Each of these has at least one control mapped to a control in GDPR. The number is how many GDPR controls are shared, counted from the mapping graph.

ISO 27701:2019

33 shared controls

AICPA Privacy Management Framework (PMF)

30 shared controls

NIST SP 800-53 Rev 5

27 shared controls

APEC Cross-Border Privacy Rules (CBPR) System

24 shared controls

APPI

24 shared controls

China Personal Information Protection Law (PIPL)

24 shared controls

Australia Consumer Data Right - Banking (CDR)

22 shared controls

Australia My Health Records Act 2012

22 shared controls

Where GDPR overlaps with the standards you already hold

GDPR vs CCPA/CPRAView comparison →GDPR vs HIPAA Security RuleView comparison →GDPR vs ISO 27701:2019View comparison →

Implementation guides for frameworks that overlap GDPR

NIST 800-53 Controlscovers NIST SP 800-53 Rev 5 →

Step-by-step implementation of GDPR

GDPR ImplementationStep-by-step guide →

More GDPR comparisons

GDPR vs AICPA Privacy Management Framework (PMF)View comparison →GDPR vs NIST SP 800-53 Rev 5View comparison →GDPR vs APEC Cross-Border Privacy Rules (CBPR) SystemView comparison →GDPR vs APPIView comparison →GDPR vs China Personal Information Protection Law (PIPL)View comparison →GDPR vs Australia Consumer Data Right - Banking (CDR)View comparison →

Analysis of GDPR

Understanding the Relationship Between hotspaces.org and cpcopenhagen.dkDiscover the operational and compliance connection between hotspaces.org and cpcopenhagen.dk, including contact details and governance implications.
CRM Online Toolkit: What It Is, What It Includes, and Who Should Use ItThe CRM Online Toolkit is a downloadable resource with templates, audit checklists, and process maps to help organisations align customer relationship systems with data protection and operational compliance.
CRM for Small Business Toolkit: Features, Compliance, and ImplementationA CRM for small business toolkit includes software, templates, and compliance guidance to manage customer relationships efficiently, aligned with frameworks such as [GDPR](/frameworks/gdpr) and [ISO 27001](/frameworks/iso-27001).
How to Execute GDPR Article 32 Security of Processing Integration with CCPA-CPRA Technical Safeguards for Cross-Border Data OperationsOrganizations operating across EU and California jurisdictions must implement unified technical safeguards that satisfy both GDPR Article 32 security requirements and CCPA-CPRA data protection provisions. This integration approach ensures comprehensive data protection compliance while avoiding regulatory conflicts in cross-border operations.

Training that covers GDPR

AI Engineering for Compliance AgentsProfessional
$249 USD
Board AI Governance and Fiduciary DutyExecutive
$249 USD
Building Compliance Chatbots and Virtual AdvisorsProfessional
$249 USD
Cross-Framework Control Mapping with AI AutomationProfessional
$249 USD
Cybersecurity and Data ProtectionFoundation

Where to get trained on GDPR

4 courses in the catalogue cover GDPR directly. Each is self-paced, includes the downloadable toolkit and the implementation playbook, and carries a certificate of completion.

Employee Training and GDPR Kit$249 USDPrivacy Training Programs and GDPR Kit$249 USDGdpr Training in Management Software Kit$249 USDData Protection Training Resources and GDPR Kit$249 USD

Training more than one person? Ten seats of any course is $1,490 on a single licence, against $199 a seat bought one at a time.

Policy templates that implement GDPR

5 policy templates in the library map to GDPR. Each is a working document you can download, edit and adopt, not a summary of what a policy should contain. Creating a free account opens the download.

Data Protection PolicyFreePrivacy Notice TemplateDownloadData Retention & Disposal PolicyDownloadConsent Management PolicyDownloadData Protection Impact Assessment ProcedureDownload
See the full policy template libraryOr take GDPR as a full course

What an auditor will ask you for

All 40 GDPR controls, each with what it requires, the artefacts an auditor will ask you for, and where it commonly fails. Free to read, nothing to fill in.

Read the GDPR evidence request list

Prefer it in your inbox?

The list above is free to read. If you would rather have the GDPR version emailed so it is there when you need it, say where to send it.

What GDPR means in your sector

GDPR for Healthcare→GDPR for Financial Services→GDPR for Technology→GDPR for Government→GDPR for Manufacturing→GDPR for Energy→GDPR for Retail→GDPR for Education→

What GDPR means for your job

GDPR for CISOs→GDPR for Compliance Officers→GDPR for Risk Managers→GDPR for IT Directors→GDPR for DPOs→GDPR for Auditors→

Questions people ask about GDPR

What is GDPR?
General Data Protection Regulation - EU regulation on data protection and privacy for all individuals within the European Union and European Economic Area.
How many controls does GDPR have?
GDPR contains 41 controls organized across 5 domains.
Where does GDPR apply?
GDPR is applicable in European Union. Organizations operating in or serving customers in this jurisdiction should evaluate its requirements.
What frameworks does GDPR map to?
GDPR has control-to-control mappings with 241 other compliance frameworks in our database. Use our compliance platform to explore these mappings interactively.
How do I get started with GDPR compliance?
Start by understanding the framework's key controls and domains. Our compliance platform provides AI-powered gap analysis and mapping tools to help you assess your current posture and build a remediation plan.

Query GDPR programmatically

GDPR, its 41 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.

GDPR API reference and MCP config →

What GDPR requires, control by control

Each page carries the requirement text for one GDPR control and what an assessor expects to see as evidence.

How much of another standard GDPR already covers

Each crosswalk is judged control by control, and the mappings that were rejected are kept alongside the ones that held.

How ready are you for GDPR?

Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.

Get Your Readiness Report, from $49Explore Platform Free
Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .