GDPR compliance and EU data protection

Wherever your company is based, if you intend to offer goods or services to people inside the European Union, you have to comply with the EU General Data Protection Regulation (GDPR).

Our free data protection guides and tools help you to achieve GDPR compliance. Our flat-rate services and legal consulting enable you to focus on your core business.

Compliance wit the GDPR

Guides and manuals for your GDPR compliance

Transfer to third countries according to Art. 49 GDPR

The derogation in the GDPR allows data to be transferred to third countries without data protection guarantees. The question is under what conditions these exceptions apply.

CJEU ruling on data retention

Mass data retention can only be made mandatory by EU Member States if public security is threatened. What are the consequences for companies in the communication sector?

GDPR-compliant data processing on behalf of a controller

If a service provider processes personal data on behalf of a controller both sides have to comply with several obligations of the GDPR. Above all, they must conclude a contract defining the rights and obligations of all involved.

Data transfers between the EU and third states after the EU-U.S. Privacy Shield

The CJEU invalidation of the EU-U.S. Privacy Shield posed a number of questions for companies and organisations transferring data to the U.S. or third countries, to which the EDPB provides answers in a recently published statement.

EDPB Guidelines on consent under the GDPR

The requirements a consent solution has to meet to be GDPR-compliant, the new but expected opinion of the EDPB, and a practical checklist for website owners.

Information that must be provided under the GDPR

Data subjects must be informed before their personal data is processed. But how do controllers best fulfill these information requirements? What must the respective information contain? A practical guide.

CJEU strikes down EU-U.S. Privacy Shield while SCCs remain valid

What the verdict means for European companies, which alternatives are available and why it does not only affect data transfers to the U.S.

Data breach or data theft: What you have to do immediately according to GDPR

Handling your company’s data breach quickly, carefully and legally

How to create and maintain a record of processing activities (ROPA)?

The ultimate guide to one of the most important data protection documentations in a company.

Joint controllership under the GDPR

When is there a joint controllership according to GDPR? How is it different from other forms of collaboration? What do joint controllers have to consider when processing data together? An overview!

Processing of personal data in the context of connected car technology

The latest EDPB Guidelines, further key issues for data controllers and the important role of a data protection officer in the context of connected car technology

Data Protection and the coronavirus: Key measures your business should be taking

What should companies be aware of when monitoring and checking employees and visitors for possible corona infections?

Meaning of the CJEU judgment on Standard Contractual Clauses

The legality of SCCs, the expected judgment of the CJEU and the impact on companies that process data in third countries.

The use of CCTV cameras and data protection

A ruling of the CJEU provides guidance for companies who want to implement a GDPR-compliant CCTV.

The California Consumer Privacy Act and its implications for businesses worldwide

Is your business affected by the CCPA? What rights does the CCPA grant consumers? What are the most important obligations businesses must uphold? A brief and practical overview.

Data protection for homeworking during the Corona crisis

How companies can ensure that the requirements of the GDPR and DPA 2018 are complied with during the corona pandemic while employees are working from home? A practical guide.

U.S. CLOUD Act vs. GDPR

Is the U.S. CLOUD Act compatible with the requirements of the EU General Data Protection Regulation (GDPR)? And what does the CLOUD Act mean for European businesses if they rely on U.S. service providers?

The EU Whistleblower Directive and its implications for data protection

Companies should take the new EU regulations for the protection of whistleblowers seriously. Otherwise whistleblowers might choose external channels and heavily damage the company’s image.

ECJ: Consent to cookies is mandatory and must not be pre-ticked!

The ECJ has ruled that placing cookies on a device will always require informed consent. This must not be the default setting in the cookie-consent banner!

Facebook Like button: Website operators are (jointly) responsible

If your website uses a “Like” button for Facebook, you might be held responsible for transmitting of personal data to the social network. However, there is a GDPR-compliant solution for social sharing buttons.

Who needs to appoint a data protection officer according to the GDPR?

One of the most urgent questions companies in the EU need to answer is whether they have to appoint a data protection officer (DPO) or not.

When do the GDPR provisions apply to non-EU businesses?

A clarification of several key issues helps companies outside the EU answer the difficult question of whether they have to comply with European data protection laws.

Load more

Your representative in the Union

Sell your products and services in lucrative EU markets. As your EU representative, we take care of the communication with data subjects and data protection supervisory authorities.

Show more!

Boost your GDPR compliance with our free templates and checklists

Declaration of consent to use photographic images (template)

Looking to make photos of your employees public? Then you need their consent. Download a free template here!

Data protection audit (check list)

Cover all the essential requirements with our free check list for carrying out a data protection audit.

Data protection for remote working (checklist)

It is important that both you and your employees follow your company’s procedures, policies and guidance when your employees are working from home or another remote working location. Our checklist provides key tips for data protection when working remotely.

Data protection confidentiality letter (template)

If employees or external service providers are processing personal data, they must maintain confidentiality. Our free template provides a simple way to require processors to do so.

Data protection contract (template)

If you process personal data on behalf of a controller or have personal data processed by a service provider, you must conclude a data protection contract. Our free template helps both sides.

Data protection policy (template)

The data protection policy is a documentation that summarises all legal data protection aspects in the company. Our free template helps you to include objectives, responsibilities and documentation obligations in this important strategy paper.

Load more

One data protection officer for your entire group

As an external data protection officer for your group, we take care of all data protection issues for your companies in the EU. Either for selected countries or for your entire group.

Show more!

Generators for individual data protection documents

Video surveillance sign

Create a GDPR-compliant video surveillance notification sign and an informational bulletin in just a few easy steps.

Privacy policy generator

With our free generator you can create a privacy statement or data protection notices for our website.

Load more