Knowledge Base
Practical GDPR guides for SME owners. Step-by-step explanations without legal jargon, written for non-lawyers.
Learn GDPR
Plain-English guides for SME owners
GDPR Obligations
Processing register, DPO, DPIA and all other obligations imposed by the GDPR.
Rights & Requests
Access requests, right to erasure and other data subject rights.
Security
Technical and organizational measures to protect personal data.
Misconceptions
Common misconceptions about the GDPR, and what's actually true.
Templates
Ready-to-use templates for privacy statements, DPAs and more.
How GDPRWise Works
Step-by-step explanation of how GDPRWise helps you with GDPR compliance.
News
Enforcement cases, fines and news from the privacy world.
How GDPR-compliant is your site right now?
Free scan, no account, results in 2 minutes.
Courses
Free, multilingual GDPR training for SMEs. Learn the essentials at your own pace and earn your certificate.
Featured
Hand-picked articles worth reading first.
GDPR Minimum: Transparency First, Then Grow Into the Rest
The honest, smallest version of GDPR for a business that just started: what transparency actually requires, the five must-do's, and how to mature as you grow.
push_pin Editor's pick Rights & RequestsHow to Set Up a Data Subject Request Process
A step-by-step guide to building a reliable process for handling GDPR data subject requests. From designating a contact point to documenting every step, this article covers everything an SME needs to handle requests correctly and on time.
push_pin Editor's pick How GDPRWise WorksWhy GDPRWise Is the Best GDPR Tool for Small Firms
GDPRWise is purpose-built for small businesses. AI-powered scanning, a three-layer dossier model, and a staff privacy policy make compliance fast and affordable.
push_pin Editor's pick How GDPRWise WorksHow Does the GDPRWise Scan Work?
Curious what happens when GDPRWise scans your website? This article explains how the scan works, what it detects and what results you get within 2 minutes.
push_pin Editor's pick How GDPRWise WorksYour Third-Party Dossier: When External Services Process Personal Data
Most of the time you are just using a service, but the sharing of personal data is a side effect. Your third-party dossier maps all external services where third parties are involved in personal data processing.
push_pin Editor's pick How GDPRWise WorksWhat's in Your GDPRWise Dossier?
Your GDPRWise dossier contains everything you need to manage and demonstrate GDPR compliance. From the process definitions, personal data items, and your third parties to your compliance actions & score.
Recent articles
5 Steps to Get the Most Out of GDPRWise
A step-by-step guide for SME owners on how to use GDPRWise effectively, from the AI website scan to a published privacy policy. Five focused steps, plus a note on security and data subject rights.
GDPR ObligationsGDPR Register: Do I Need One?
Yes, almost every business does. The 'fewer than 250 employees' exemption rarely applies in practice. Here's what the register must contain and how to start.
NewsGDPR and Real Estate: What Landlords Need to Know
The GDPR also applies to landlords, including private individuals with multiple properties. A Spanish landlord was fined EUR 1,200 for failing to inform a tenant. This article explains what you need to arrange.
Rights & RequestsData Subject Request Mistakes That Cost SMEs Fines
Six common mistakes SMEs make when handling data subject requests, with real enforcement examples and practical advice on how to avoid them. From ignoring requests to panic-deleting data.
SecurityWhen an Employee Leaves: How to Handle Their Email Account
When someone leaves your company, you cannot simply take over or delete their work email account. A Norwegian firm learned this the hard way with a 14,700 EUR fine. Here is how to handle departing employees' accounts under the GDPR.
TemplatesTemplate: Data Breach Notification to the Supervisory Authority
A data breach must be reported to the supervisory authority within 72 hours. Use this template to report quickly and correctly, with all required information.