Structured requirements
Core GDPR requirements are source-versioned and kept separate from Swedish law and IMY operational guidance.
Trace work to the GDPR
Privelos supports accountable GDPR governance. It cannot independently guarantee legal compliance.
Human legal judgement
Applicability, transfer decisions, risk acceptance, breach notification and other consequential decisions remain with authorised people.
Requirement → control → evidence
Each assessment can be connected to an owned control, supporting evidence, corrective work, approval and review.