European Union
GDPR compliance, made simple
The EU's General Data Protection Regulation governs how organisations collect, use, and protect the personal data of people in the European Union — regardless of where the organisation itself is based.
ComplianceDesk gives you 21 pre-built GDPR controls, an evidence vault, audit-ready reports, and reminders before anything falls overdue — so proving GDPR compliance stops being a spreadsheet exercise.
Every GDPR control, organised for you
The real control library ComplianceDesk seeds the moment you activate GDPR — 21 controls across 8 categories.
Lawfulness, Fairness & Transparency
- GDPR-1.1 Lawful basis identified for each processing activity
- GDPR-1.2 Consent capture meets Article 7 requirements
- GDPR-1.3 Privacy notices provided at collection
Data Subject Rights
- GDPR-2.1 Subject access request process
- GDPR-2.2 Erasure and rectification request process
- GDPR-2.3 Data portability mechanism
- GDPR-2.4 Restriction of processing honoured
- GDPR-2.5 Right to object and automated decision-making safeguards
Accountability & Governance
- GDPR-3.1 Record of processing activities maintained
- GDPR-3.2 Data processing agreements with processors
- GDPR-3.3 Accountability policy and training
- GDPR-3.4 Joint controllership arrangements documented
Data Protection by Design & DPIA
- GDPR-4.1 Privacy by design and default applied to new systems
- GDPR-4.2 DPIA performed for high-risk processing
Security of Processing
- GDPR-5.1 Technical and organisational security measures
- GDPR-5.2 Confidentiality, integrity, availability and resilience tested
Breach Notification
- GDPR-6.1 Breach detection and 72-hour notification procedure
- GDPR-6.2 High-risk breach communication to data subjects
International Transfers
- GDPR-7.1 Transfer mechanism documented for non-EEA transfers
Data Protection Officer
- GDPR-8.1 DPO appointment assessed and documented
- GDPR-8.2 DPO independence and resourcing
Frequently asked questions
How many controls does ComplianceDesk track for GDPR?
21, organised into 8 categories, ready to assign to an owner as soon as you activate the framework.
Can I track GDPR alongside other frameworks?
Yes — most teams activate several frameworks at once. Controls that overlap across frameworks can share the same evidence, so you don't collect the same document twice.
How long does it take to set up GDPR in ComplianceDesk?
Activating GDPR instantly seeds its full control library. Most teams assign owners and get their first controls moving within a day.
Related guides
Other European Union frameworks
See your full compliance picture
131 frameworks, one system of record.