Academy
Privacy & Data Protection
Privacy and data protection
-
Cookies and Consent
When a cookie banner is required, what valid consent looks like and how the ePrivacy rules and the GDPR work together.
-
Data Breaches: the 72-Hour Rule
When a personal data breach must be notified to the data protection authority and to individuals, how the 72 hours are counted and what to document.
-
Data Subject Access Requests
How the right of access works under Article 15 GDPR, how to handle the deadline, what you may refuse and what a good response contains.
-
How Long May You Keep Personal Data?
The storage limitation principle in Article 5(1)(e) GDPR, how to set retention periods and how to delete in practice.
-
International Data Transfers
How Chapter V GDPR works after Schrems II: adequacy decisions, the EU-US Data Privacy Framework, standard contractual clauses and the assessment that goes with them.
-
Records of Processing Activities (RoPA)
What Article 30 GDPR requires you to record, who must keep a register, and how to keep it useful.
-
Website Technology Audits and the GDPR
What a website technology audit examines, why privacy notices and actual data flows drift apart, and which legal duties it checks.
Let’s talk
Tell us what you’re working on. We’ll get the right person on it and reply within one business day. The first chat is free.