Tools·ENISAEN
Export
ENISA guidelines for SMEs on the security of personal data processing
ENISA’s method for a small organisation to define a processing operation, assess its impact and the likelihood of threats, and pick security measures from a catalogue matched to the resulting risk level. The basis of ENISA’s former online risk tool (discontinued).
When to use itYou need a documented, proportionate way to choose security measures for a small organisation.
- Published by
- ENISA (EU institution)
- Written for
- EU
- For
- SMEs, controllers
- Cost
- free
- Languages
- English
- Provisions
- GDPR Art. 32
Open the toolenisa.europa.eu
Description by overview.legal; the tool itself is the publisher’s.
How it connects
Other tools for the same task
ENISA ENISA: Data protection engineering ENISA’s report on the techniques that put data protection by design into practice: anonymisation and pseudonymisation, data masking, privacy-preserving computation,… guide
CNIL CNIL GDPR guide for developers The CNIL’s open guide for developers in eighteen factsheets: identifying personal data, preparing a project, securing the environment and code, minimising collection, managing… developer ·open source
ICO ICO data protection self-assessment checklists Short self-assessment checklists from the UK regulator for small organisations: data protection assurance, information security, direct marketing, records management, data sharing… UK ·checklist
Proton GDPR.eu compliance checklist A plain-language checklist of what a business must have in place under the GDPR: lawful basis and transparency, data security, accountability and governance, privacy rights.… checklist
AEPD Facilita RGPD (AEPD) The Spanish DPA’s questionnaire for businesses that process personal data with little risk (customers, staff, suppliers): from the answers it produces the minimum documents, such… ES ·calculator
AEPD Evalúa-Riesgo RGPD: does this processing need a DPIA? (AEPD) An online tool of the Spanish DPA that makes a first risk analysis of one processing operation and tells whether it is likely to need a DPIA, using the high-risk criteria of the… ES ·calculator