🔒 Data Privacy
GDPR, CCPA and HIPAA compliance — data inventory, subject rights requests, incident management and privacy impact assessments
Record of Processing Activities (ROPA)
| Data Category | Data Elements | Legal Basis | Retention | Third Party | Cross-Border | Risk | Frameworks | Actions |
|---|---|---|---|---|---|---|---|---|
Loading inventory... | ||||||||
Data Subject Requests (DSR)
| Request Type | Requester | Received | Due Date | Days Remaining | Status | Assigned | Actions |
|---|---|---|---|---|---|---|---|
Loading requests... | |||||||
Privacy Incidents
| Incident | Type | Severity | Discovery | Data Subjects | Notifiable | Notification Deadline | Status | Actions |
|---|---|---|---|---|---|---|---|---|
Loading incidents... | ||||||||
1. Processing
2. Necessity
3. Risks
4. Measures
5. DPO
6. Sign-Off
Step 1: Processing Description
Describe the data processing activity being assessed.
Step 2: Necessity & Proportionality
Assess whether data processing is proportionate to the stated purpose.
Step 3: Risk Identification
Identify privacy risks associated with this processing activity.
Step 4: Risk Measures
Describe controls and measures to mitigate the identified risks.
Step 5: DPO Consultation
Determine if Data Protection Officer consultation is required.
Step 6: Sign-Off
Complete the PIA and save it to the workpapers register.
Data Inventory Analyzer
Review your data inventory and identify gaps in legal basis, retention periods, and cross-border transfer safeguards.
GDPR Gap Assessment
Assess compliance posture across all 7 GDPR principles: Lawfulness, Fairness, Transparency, Purpose Limitation, Data Minimisation, Accuracy, Storage Limitation, Integrity & Confidentiality.
Privacy Policy Generator
Generate a compliant, plain-English privacy policy based on your data inventory and applicable jurisdictions.
Breach Notification Drafter
Draft a regulatory breach notification for GDPR (ICO), CCPA (California AG), or HIPAA (HHS OCR) with all required legal elements.