Tools

GDPR and LGPD compliance basics

The documents a regulator asks for first: the record of processing, the lawful basis of each activity, the DPIA and the breach response plan.

The flow

1. 1Record your processing activitiesOne row per activity, with lawful basis, retention and security, and a check of what is still missing.ROPA template
2. 2Choose the lawful basis for each activityAnswer simple questions about the processing and see the best lawful basis, the alternatives and what to rule out.Lawful basis selector (GDPR and LGPD)
3. 3Run a DPIA for high-risk processingHigh-risk screening, a risk matrix, measures and an AI section in a draft ready to review with your DPO.DPIA template
4. 4Work out the breach notification deadlinesEnter when you became aware of the breach and see every deadline, in clock hours (GDPR) and business days (LGPD).Breach notification deadline calculator