Key GDPR Topics

Explore important concepts and requirements in the GDPR organized by topic.

Understanding consent as a legal basis for processing personal data under GDPR, including requirements for valid consent and when it should be used.

The role, responsibilities, and appointment requirements for Data Protection Officers under GDPR.

Requirements and procedures for notifying supervisory authorities and affected individuals when a personal data breach occurs.

When and how to conduct a DPIA to identify and minimize data protection risks in processing operations.

The principle of embedding data protection into the development of business processes, products, and services from the earliest stages.

The right of individuals to have their personal data erased under certain circumstances, also known as the right to erasure.

The right of individuals to receive their personal data in a structured, commonly used format and transmit it to another controller.

Rules and mechanisms for transferring personal data outside the European Economic Area to ensure adequate protection.

Understanding legitimate interests as a legal basis for processing, including how to conduct a legitimate interests assessment.

Understanding sensitive data that requires enhanced protection under GDPR, including racial origin, health data, and biometric data.

Enhanced protections and specific requirements for processing personal data of children under GDPR.

Rights and safeguards related to automated decisions and profiling, including the right not to be subject to solely automated decision-making.

Documentation requirements for maintaining comprehensive records of data processing activities under GDPR.

Comprehensive overview of the rights individuals have over their personal data under GDPR and how to facilitate them.

Understanding the six lawful bases for processing personal data under Article 6 of GDPR and how to identify the appropriate basis.

Requirements for implementing appropriate technical and organizational measures to ensure the security of personal data.

Techniques for protecting personal data by pseudonymization and anonymization, including their differences and applications.

Understanding joint controller relationships, responsibilities, and requirements for transparent allocation of GDPR obligations.

Role, powers, and responsibilities of data protection supervisory authorities in enforcing GDPR compliance.

Understanding the administrative fines and penalties that can be imposed for GDPR violations, including how they are calculated.