Tools·AEPDEN
Export
Comunica-Brecha RGPD: must the people affected be told? (AEPD)
The Spanish DPA’s decision aid for the second question after a breach: whether the risk to people is high enough that they must be informed under Article 34, and what the message must contain.
When to use itYou have assessed a breach and must decide whether to write to the data subjects.
- Published by
- AEPD (supervisory authority)
- Written for
- Spain
- For
- controllers, DPOs and privacy officers
- Cost
- free
- Languages
- Spanish
- Provisions
- GDPR Art. 34
Open the toolaepd.es
Description by overview.legal; the tool itself is the publisher’s.
How it connects
Other tools for the same task
CNIL CNIL PIA software (privacy impact assessment tool) Free, open-source software by the French DPA that guides a controller through a data protection impact assessment: describe the processing, assess necessity and proportionality,… open source
ICO ICO lawful basis interactive guidance tool Interactive questionnaire by the UK regulator that helps a controller choose the most appropriate lawful basis under Article 6 (and a condition under Articles 9 and 10) for one… UK
Future of Life Institute EU AI Act Compliance Checker (Future of Life Institute) An independent self-assessment that walks providers, deployers and importers through the AI Act’s scoping questions: whether a system is in scope, its risk class (prohibited,…
European Commission (AI Office) EU AI Act Compliance Checker (AI Act Service Desk) The Commission’s own questionnaire on the AI Act Service Desk: it asks what an AI system or general-purpose model does and who you are in the chain, and answers which rules of…
AEPD Facilita RGPD (AEPD) The Spanish DPA’s questionnaire for businesses that process personal data with little risk (customers, staff, suppliers): from the answers it produces the minimum documents, such… ES
AEPD Evalúa-Riesgo RGPD: does this processing need a DPIA? (AEPD) An online tool of the Spanish DPA that makes a first risk analysis of one processing operation and tells whether it is likely to need a DPIA, using the high-risk criteria of the… ES