GDPR Compliance Resource Center

Guides, templates, and regulatory references for organisations processing personal data under the General Data Protection Regulation (EU) 2016/679. All content references specific GDPR articles and recitals to ensure accuracy and traceability to the source regulation.

View Principles Data Subject Rights

Core GDPR Framework

Fundamental principles, individual rights, and lawful bases as defined in Chapters II and III of the GDPR.

Data Protection Principles

Art. 5

The seven principles of Article 5: lawfulness, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and accountability.

Data Subject Rights

Art. 12-22

Rights of access, rectification, erasure, restriction, portability, objection, and automated decision-making under Articles 12-22.

Lawful Basis for Processing

Art. 6

The six lawful bases under Article 6: consent, contract, legal obligation, vital interests, public task, and legitimate interests.

Templates

Editable compliance document templates with regulatory references and implementation guidance.

Data Processing Agreement

Annotated DPA template with required clauses under Article 28, covering processor obligations, sub-processors, and audit rights.

Consent Form Patterns

Granular consent, cookie consent, marketing consent, and research consent templates meeting Article 7 requirements.

Guides and References

In-depth guidance on GDPR processes and enforcement data.

Data Protection Impact Assessment

When a DPIA is required under Article 35, methodology, risk assessment matrix, and supervisory authority consultation process.

Enforcement and Fines

GDPR fine tiers, notable enforcement actions, and supervisory authority contacts across EU member states.

Disclaimer: This site provides general information about the General Data Protection Regulation (EU) 2016/679 and related data protection requirements. It does not constitute legal advice. Consult qualified legal counsel for guidance specific to your organisation. Regulatory references are based on the official text of Regulation (EU) 2016/679 as published in the Official Journal of the European Union.