Checks / GDPR (UK and EU)
GDPR (UK and EU)
GDPR (UK and EU) compliance checks
Data protection law covering how personal data is collected, used, kept and explained, including automated decisions about people.
33 controls, each a live check with a tamper-evident receipt. Run the whole framework at once from any AI assistant with sebbi_run_framework and framework=gdpr.
- GDPR Art.5 - processing purpose stated
- GDPR Art.5 - data minimisation applied
- GDPR Art.5 - storage limitation set
- GDPR Art.6 - lawful basis recorded
- GDPR Art.7 - consent is recorded
- GDPR Art.9 - special-category safeguard
- GDPR Art.12 - transparent information provided
- GDPR Art.13 - privacy notice shown
- GDPR Art.15 - right of access supported
- GDPR Art.16 - rectification supported
- GDPR Art.17 - erasure supported
- GDPR Art.18 - restriction supported
- GDPR Art.20 - data portability supported
- GDPR Art.21 - right to object supported
- GDPR Art.22 - human review of automated decision
- GDPR Art.25 - data protection by design
- GDPR Art.28 - processor contract in place
- GDPR Art.30 - records of processing referenced
- GDPR Art.32 - encryption in place
- GDPR Art.32 - access controls in place
- GDPR Art.33 - 72-hour breach process
- GDPR Art.35 - DPIA referenced
- GDPR Art.37 - DPO appointed where required
- GDPR Art.44 - international transfer mechanism
- GDPR Art.46 - appropriate safeguards (SCCs)
- GDPR Art.5 - accuracy principle upheld
- GDPR Art.5 - integrity & confidentiality
- GDPR Art.5 - accountability demonstrable
- GDPR Art.24 - controller responsibility evidenced
- GDPR Art.26 - joint-controller arrangement
- GDPR Art.34 - data-subject breach notification
- GDPR Art.40 - code of conduct adhered
- GDPR Art.42 - certification held