Tag
Privacy, page 2
33 articles
Privacy
Standard contractual clauses for international transfers
How the 2021 EU standard contractual clauses work: choosing a module, completing the annexes, the clauses you cannot change, and the ongoing duties.
6 min read
Privacy
What belongs in a GDPR data processing agreement
The terms Article 28(3) makes mandatory in every DPA, what each one commits a processor to in practice, and the clauses worth negotiating beyond the minimum.
6 min read
Compliance frameworks
NIST 800-53 Rev 5 privacy controls
How NIST SP 800-53 Rev. 5 builds privacy into the catalog: the PT family, privacy controls in other families, the privacy baseline, and who owns what.
5 min read
Compliance frameworks
ISO 27701 and GDPR: how they map
Where ISO 27701 controls line up with GDPR articles, where the regulation asks for more than the standard, and how to use the mapping without overclaiming.
6 min read
Privacy
When a DPIA is required under GDPR
How to tell whether GDPR Article 35 requires a DPIA: the three named cases, the nine screening criteria, national lists, and what to record if you skip.
6 min read
Compliance frameworks
ISO 27701 controller and processor controls
How to decide which ISO 27701 role you hold per activity, what the controller and processor control sets ask for, and the evidence each one has to produce.
6 min read
Privacy
How to build an Article 30 record of processing
The fields GDPR Article 30 requires of controllers and processors, how to structure the record by purpose, and the habits that keep it accurate.
6 min read
Compliance frameworks
ISO 27701 explained: extending ISO 27001 to privacy
What ISO 27701 adds to an ISO 27001 ISMS, how controller and processor controls fit, why the 2025 revision matters, and who should pursue it.
6 min read
Privacy
The six GDPR lawful bases, and how to choose one
What each of the six Article 6 lawful bases requires, which ones a SaaS company can rely on, and how to choose and record a basis before processing.
7 min read