GDPR and data protection
What does the GDPR ask of your company, and how can an AI assistant help?
Data processing agreement (DPA): when you need one
When a provider is a processor, what Art. 28(3) GDPR puts in the contract and what you check afterwards.
Data protection impact assessment (DPIA): when it is required
When Art. 35 GDPR requires a DPIA, what the supervisory authorities' list says and how to carry one out step by step.
Data protection officer: when is one required?
Art. 37 GDPR and § 38 BDSG: when you appoint a data protection officer, whether they may be external and what they do.
Personal data breach: what you report within 72 hours
What counts as a breach, when Art. 33 GDPR requires a report within 72 hours, when to tell the people affected and what you document.
Art. 15 GDPR access requests: how your company answers
Deadline, content and process when someone asks for their data: what you hand over, how you check identity and where the limits are.
GDPR compliant: what your company has to be able to show
What the word stands for: the Art. 5 principles, accountability and the records a company shows them with.
Been asked to handle NIS2?
In the end you have everything in one document: what is done, what is still open, and your management's approval with name and date. The app writes the texts.
