The General Data Protection Regulation (GDPR) is a comprehensive data privacy law that governs how personal data of individuals within the EU is collected, processed, and stored.
Update records of processing activities (ROPA)
Conduct DPIA for new processing activities
Process and respond to data subject rights requests within 30 days
Review and update Data Processing Agreements with third-party vendors.