Content type · 26 documents

Tools

Practical templates, checklists, calculators, and resources

Filter by Topic Personal Data6 Supervisory Authorities5 Accountability3 Privacy Shield3 Artificial Intelligence2 Controllers2 Cookies2 Data Breaches2 DPIA2 International Transfer2 Legitimate Interest2 Privacy Impact Assessment2

1–26 of 26 sort newest oldest title

ICO ICO lawful basis interactive guidance tool Interactive questionnaire by the UK regulator that helps controllers identify the most appropriate lawful basis under Article 6 (and conditions under Articles 9–10) for a given… calculator Legitimate Interest

Proton GDPR.eu compliance checklist Widely used plain-language GDPR compliance checklist covering lawful basis, data inventory, accountability documents, data subject rights, security and transfer requirements.… checklist Accountability Legitimate Interest Personal Data

noyb GDPRhub — case law and DPA decision wiki Open wiki by noyb collecting court decisions and DPA decisions on the GDPR from all over Europe, each with structured metadata (authority, articles, fine, date), an English… register Supervisory Authorities

EDPB EDPB register of Article 60 final decisions (one-stop-shop) The EDPB's official register of final decisions adopted under the GDPR's one-stop-shop cooperation procedure (Article 60), searchable by lead authority, concerned authorities,… register

Future of Life Institute EU AI Act Explorer Browsable, hyperlinked edition of the AI Act: every article, recital and annex cross-linked, with a search function and plain-language section summaries. The most-used way to… guide Artificial Intelligence

Future of Life Institute EU AI Act Compliance Checker Interactive self-assessment that walks providers, deployers and importers through the AI Act's scoping questions: whether a system is in scope, its risk classification (prohibited… calculator AI Value Chain Actors and Roles AI Risk Assessment Artificial Intelligence

ICO ICO documentation templates (records of processing, Article 30) Guidance plus downloadable controller and processor documentation templates for the Article 30 record of processing activities: what must be recorded, who is exempt, and… template Controllers Accountability Processors

ICO ICO transfer risk assessment (TRA) tool The UK regulator's transfer risk assessment guidance and template — the post-Schrems II supplementary assessment for restricted transfers, offered as an alternative to the EDPB's… template Privacy Shield

Bits of Freedom My Data Done Right — inzage- en verwijderverzoeken genereren Gratis tool van Bits of Freedom die voor betrokkenen kant-en-klare AVG-verzoeken genereert: inzage (art. 15), rectificatie (art. 16), verwijdering (art. 17) en overdraagbaarheid… template NL

ICO ICO data protection self-assessment checklists Self-assessment checklists by the UK regulator for small organisations: controllers, processors, information security, direct marketing, records management and CCTV — each… checklist Video Surveillance Marketing Direct Marketing

CMS GDPR Enforcement Tracker (fines and penalties database) Continuously updated database by CMS of thousands of GDPR fines and penalties across all member states: authority, amount, date, sector, violated articles and a summary per… register Fines Supervision Statistics

US Department of Commerce Data Privacy Framework program — participant list The official searchable list of US organisations self-certified under the EU-US Data Privacy Framework (the adequacy basis for EU→US transfers since 2023). Checking a recipient's… register Privacy Shield Recipient

European Commission DSA Transparency Database (statements of reasons) The European Commission's database of statements of reasons that online platforms must submit under Article 17 DSA for every content moderation decision — searchable and… register Transparency Transparency Reporting Obligations Overview

CJEU InfoCuria — CJEU case-law search The Court of Justice of the European Union's official case-law search: judgments, opinions and orders of the Court and the General Court, searchable by case number, parties, field… register

EDPB EDPB website auditing tool Open-source website auditing software released by the EDPB (built on the EDPS Website Evidence Collector) that lets DPAs and controllers audit websites for trackers and data flows… developer

CNIL CookieViz — visualise web tracking (CNIL) Open-source tool by the French DPA's innovation lab that visualises in real time which third parties are notified while you browse: cookies set, trackers loaded and the network of… developer Cookies Monitoring Supervisory Authorities

European Commission European Commission adequacy decisions The authoritative list of third countries the European Commission has recognised as providing adequate protection under Article 45 GDPR (and its LED equivalent), with links to… register Privacy Shield International Transfer Law Enforcement

CNIL CNIL record of processing activities template The French DPA's explanation of the Article 30 record-keeping obligation with a simplified downloadable register template aimed at SMEs: one sheet per processing activity covering… template Accountability Processing Security

European Commission Standard Contractual Clauses (SCCs) for international transfers The European Commission's modernised standard contractual clauses (2021) for transfers of personal data to third countries under Article 46(2)(c) GDPR, plus the… template International Transfer Controllers Processors

ICO ICO Data Protection Impact Assessment (DPIA) guidance and template The UK regulator's step-by-step DPIA guidance with a downloadable template: screening questions to decide whether a DPIA is required, how to describe processing, consultation,… template DPIA Privacy Impact Assessment

RVO AVG-regelhulp voor bedrijven Interactieve regelhulp van de Rijksdienst voor Ondernemend Nederland, ontwikkeld met de Autoriteit Persoonsgegevens: in circa tien vragen een beeld van wat de AVG concreet voor… checklist Personal Data NL

Autoriteit Persoonsgegevens Meldloket datalekken Autoriteit Persoonsgegevens Het officiële loket van de Autoriteit Persoonsgegevens voor het melden van datalekken op grond van artikel 33 AVG. Verwerkingsverantwoordelijken melden hier binnen 72 uur een… register Data Breaches Personal Data NL

CNIL CNIL GDPR guide for developers Open-source best-practice guide by the French DPA translating GDPR obligations into concrete development practice: data minimisation in code, managing consent, securing data… developer Retention Period Personal Data Consent

CNIL CNIL PIA software (privacy impact assessment tool) Free, open-source software by the French DPA that guides controllers through a data protection impact assessment (DPIA) as required by Article 35 GDPR: contextualise the… calculator DPIA Privacy Impact Assessment Supervisory Authorities

EDPB EDPB Data Protection Guide for Small Business Interactive guide by the European Data Protection Board that walks SMEs through GDPR compliance: lawful bases, individuals' rights, security of processing, data breach response,… guide Data Breaches

EDPS EDPS Website Evidence Collector Open-source tool by the European Data Protection Supervisor that automatically collects evidence of personal data processing by websites: cookies, local storage, third-party… developer Cookies Personal Data