Manage your GDPR compliance with GlobalSuite®

The General Data Protection Regulation (GDPR) and Spain's LOPDGDD turn data protection into a management system, with obligations for controllers and processors. The idea behind it is accountability: complying is not enough, you have to be able to prove it.

This guide goes through each element the regulation introduces and how it is managed in GlobalSuite®. It is for Data Protection Officers and privacy leads who need structure and want to stop depending on spreadsheets.

What is at stake

Serious infringements can cost up to 10 million euros or 2% of worldwide annual turnover, and very serious ones up to 20 million euros or 4%, whichever is higher. Breaches that could harm data subjects must be notified to the supervisory authority within 72 hours.

What's in the guide

1. The GDPR principlesThe seven principles every processing activity has to respect, from data minimisation to accuracy.
2. Record of processing and risk analysisWhat the controller's and the processor's records must contain, and how the risk analysis tells you whether a DPIA is needed.
3. Impact assessment (DPIA)When it is required, its minimum content and how to manage controls and action plans.
4. DPO, processors and rightsThe DPO's tasks, Article 28 contracts and requests from data subjects, answered within one month.
5. Audits, breaches and finesTesting security measures under Article 32, the breach life cycle and the penalty regime.
6. Spreadsheets versus GlobalSuite®A side-by-side comparison on security, traceability, versions, alerts and access control.

Related standards

Because GlobalSuite® is an integrated platform, you can grow from data protection into ISO 27001 or Spain's National Security Framework (ENS) and reuse the work already done.