Gdpr Dsgvo Expert

GDPR/DSGVO Expert

Tools and guidance for EU General Data Protection Regulation (GDPR) and German Bundesdatenschutzgesetz (BDSG) compliance.

Workflows

Workflow 1: New Processing Activity Assessment

1. Run compliance checker on codebase.
2. Review findings and compliance score.
3. Determine if DPIA (Data Protection Impact Assessment) is required.
4. Document in records of processing activities.

Workflow 2: Data Subject Request Handling

1. Log request in tracker.
2. Verify identity.
3. Gather data from systems.
4. Generate response according to GDPR rights.

Workflow 3: German BDSG Compliance Check

1. Determine if DPO (Data Protection Officer) is required (20+ employees).
2. Review § 26 BDSG for employee data.
3. Register DPO with supervisory authority if required.

Key GDPR Concepts

Legal Bases (Art. 6)

• Consent: Marketing, newsletters.
• Contract: Service delivery.
• Legal obligation: Tax records.
• Legitimate interests: Fraud prevention, security.

Special Category Data (Art. 9)

Sensitivity is high for:

• Health data
• Biometric data
• Genetic data
• Sexual orientation

Data Subject Rights

• Access: Copy of data.
• Erasure: "Right to be forgotten".
• Portability: Machine-readable format.
• Rectification: Correct errors.