International
AvailableGDPR. Connected to your programme.
General Data Protection Regulation
Turn local requirements into assigned work, linked records and evidence you can review.
The framework at a glance.
The EU regulation. Mapped to African laws so evidence collected once counts for both.
- Country
- International
- Primary legislation
- General Data Protection Regulation
- Regulator
- Each EU member state's supervisory authority
Key areas
From requirements to practical work.
- Records1 control to evidence
- Risk1 control to evidence
- Incidents1 control to evidence
- Rights1 control to evidence
- Transfers1 control to evidence
- Governance1 control to evidence
- Security1 control to evidence
- Transparency1 control to evidence
- Lawfulness1 control to evidence
- Retention1 control to evidence
- Third parties1 control to evidence
See how the work connects.
Move from a requirement to the record, owner and evidence behind it.
Explore platform featuresStatuses support programme review; they are not legal certification.Illustrative records
What an inspector checks
11 controls, mapped to the Act.
GDPR-030 · Article 30
Records of processing activities
Maintain a record of processing activities under the controller's responsibility.
GDPR-035 · Article 35
Data protection impact assessment
Carry out a DPIA where processing is likely to result in a high risk.
GDPR-033 · Articles 33 and 34
Breach notification to the supervisory authority
Notify the supervisory authority within 72 hours of becoming aware of a breach.
Three are shown here; the full set, with tasks and evidence guidance, is in hlola.Pending review by counsel.
Resources
Explore International resources.
- ROPA starter templateCSV spreadsheet that imports straight into hlola
- International collectionGuides and templates for International in the Resource Centre
- GDPR vs African data protection laws: what changes when you expandGuide · Compliance
- Data breach notification deadlines across AfricaGuide · Breaches
- Data protection laws in Africa: a country-by-country overviewGuide · Compliance
- How to create a record of processing activities (ROPA)Guide · Records
Bring International into your privacy programme.
See your readiness against GDPR in a demo set up for your organisation.