GDPR
What is GDPR?
The General Data Protection Regulation is a comprehensive EU law governing the collection, processing, and protection of personal data of individuals within the European Union.
Terms that appear alongside gdpr
Each of these is named in at least one of the same controls as gdpr. The number is how many controls name both.
- data protection 179 shared controls
- consent 171 shared controls
- data subject 146 shared controls
- compliance 93 shared controls
- data subject rights 83 shared controls
- audit 79 shared controls
- breach notification 73 shared controls
- transparency 65 shared controls
Frameworks that govern gdpr
What the standards actually require on gdpr
Requirements naming gdpr across 6 standards, quoted from the control text.
A written decision on a request under GDPR arts 15 to 22 is taken within the periods of GDPR art. 12(3) (one month, extendable by two months);
netherlands-gdpr-implementation-act-uavg-uitvoeringswet-avg-2018::34 · Art. 34 Decide on data subject requests in writing within the GDPR periods →The controller puts suitable measures in place so that, above all, the principles of GDPR Art. 5 (lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, accountability) are com...
germany-federal-data-protection-act-bdsg::s26-5 · s 26(5) Take measures to ensure the GDPR principles are met in employee data processing →Article 24 (as amended by Ley 2/2023, in force 13 March 2023): processing needed to protect persons who report breaches of law is lawful and is governed by the GDPR, this law and the law protecting reporting persons and fighting corruption (Ley 2/2023).
spain-organic-law-32018-on-data-protection-and-digital-rights-lopdgdd::Art. 24 · Process whistleblower data under the GDPR, this law and the whistleblower protection law →Marketing by other means is allowed under GDPR arts 6 and 7 and paragraph 3-bis; telephone and paper-mail marketing using directory data is allowed towards those who have not opposed by registering in the public opposition register (Registro pubblico delle opp...
italy-personal-data-protection-code-legislative-decree-no-196-2003-amended-2018::Art. 130(3)-(3-ter) · Art. 130(3)-(3-ter) For live telephone and postal marketing, respect GDPR bases and the public opposition register →The GDPR in its original wording and the Act also apply to processing in activities outside the scope of Union law and in common foreign and security policy, except in activities governed by the Armed Forces (2021:1171), National Defence Radio Establishment (2...
sweden-data-protection-act-dataskyddslag-2018218::L1:2 · Act 1:2 and 1:3: GDPR extended to activity outside EU law →Implementation of the GDPR. Article 6 provides that, without prejudice to specific provisions, Title 1 of the Act gives effect to the GDPR in Belgian law.
BE-DPA-3 · Implementation of the GDPR →Questions people ask about gdpr
What is GDPR?
Why is GDPR important for compliance?
Which compliance frameworks address GDPR?
Where can I learn more about GDPR?
See how GDPR applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.