The General Data Protection Regulation (GDPR) is the European regulation (together with the LOPDGDD in Spain) that governs the processing of personal data. It is mandatory for any company or organization, public or private, that collects, processes, or stores personal data of European Union citizens, regardless of where the company is headquartered.

It is a mandatory document that replaces the former registration of files with the Spanish Data Protection Agency (AEPD). It must detail all data processing activities carried out by the company: what data is collected, for what purpose, who has access to it, and retention periods. GlobalSuite® enables you to generate and maintain this record in a 100% digital and up-to-date way.

The Data Protection Impact Assessment (DPIA or PIA) is mandatory when a type of processing, especially if it uses new technologies, poses a high risk to people’s rights and freedoms. For example: large-scale processing of special categories of data, video surveillance, or extensive profiling. Our solution includes templates and workflows that simplify risk analysis and calculation in these scenarios.

The GDPR expands users’ rights (access, rectification, erasure/right to be forgotten, restriction, portability, and objection). The software enables you to manage the entire lifecycle of the request (case opening, legal deadlines, alerts) and includes standardized response templates so replies are fast and traceable for potential audits.

It depends on the nature of the organization. It is mandatory for public authorities, companies whose core activity requires regular and systematic monitoring of data subjects on a large scale, and those that process sensitive data or data relating to criminal convictions on a large scale. For the DPO (internal or external), GlobalSuite® is the perfect tool, as it centralizes work, evidence, and compliance reporting in one place.