GDPR compliance is not a certificate or a one-off project. It is the ability to make appropriate decisions, carry them out, review them and demonstrate what the organisation has done.
The GDPR requires appropriate technical and organisational measures that are reviewed and updated when necessary. Privelos structures the work, while the organisation determines what is applicable and sufficient in its own context.
Privelos is an independent commercial GDPR management platform designed to help organisations structure, document and maintain their work under Regulation (EU) 2016/679 (GDPR).
Read the GDPR on EUR-Lex ↗Privelos is not affiliated with, endorsed by, certified by, sponsored by or operated by the European Union, the European Commission or any EU institution.
Maintain connected records of purposes, data subjects, data categories, lawful bases, systems, recipients, processors, transfers, retention and safeguards.
Document purpose limitation, data minimisation, accuracy, retention, transparency, security and accountability in the work where they actually matter.
Screen projects and processing for risk, complete DPIAs where required and document necessity, proportionality, measures and residual risk.
Manage identity verification, scope, system searches, communications, decisions and deadlines for data-subject requests in one case history.
Record discovery and awareness, affected data and systems, risk, containment, authority decisions, notifications, remediation and lessons learned.
Connect requirements to controls and evidence, follow gaps and corrective actions, and preserve reports, snapshots, audit history and management review.