Knowledge Base
Practical GDPR guides for SME owners. Step-by-step explanations without legal jargon, written for non-lawyers.
Quick check that you are not a bot
Bruno does not like bots :-) This only takes a few seconds.
Bruno is an AI assistant. Answers are general guidance, not legal advice. Please do not put names or other personal data in your question. How we handle your question
Learn GDPR
Plain-English guides for SME owners
GDPR Obligations
Processing register, DPO, DPIA and all other obligations imposed by the GDPR.
Rights & Requests
Access requests, right to erasure and other data subject rights.
Security
Technical and organizational measures to protect personal data.
Misconceptions
Common misconceptions about the GDPR, and what's actually true.
Templates
Ready-to-use templates for privacy statements, DPAs and more.
HR & Recruitment
GDPR in recruitment and selection, applicant data, talent pools and staff records.
How GDPRWise Works
Step-by-step explanation of how GDPRWise helps you with GDPR compliance.
News
Enforcement cases, fines and news from the privacy world.
How GDPR-compliant is your site right now?
Free scan, no account, results in 2 minutes.
Courses
Free, multilingual GDPR training for SMEs. Learn the essentials at your own pace, with a free practice quiz per course.
Featured
Hand-picked articles worth reading first.
Recruitment & GDPR: A Practical Checklist for Employers
A step-by-step GDPR checklist for recruitment, from defining what applicant data you need through to deleting it, covering privacy information, providers, screening, talent pools and AI.
push_pinEditor's pickGDPR ObligationsGDPR Minimum: Transparency First, Then Grow Into the Rest
The honest, smallest version of GDPR for a business that just started: what transparency actually requires, the five must-do's, and how to mature as you grow.
push_pinEditor's pickRights & RequestsHow to Set Up a Data Subject Request Process
A step-by-step guide to building a reliable process for handling GDPR data subject requests. From designating a contact point to documenting every step, this article covers everything an SME needs to handle requests correctly and on time.
push_pinEditor's pickHow GDPRWise WorksGDPR With No In-House Expertise: How Small Firms Cope
Small firms carry the same GDPR obligations as a corporation, but without a DPO, an IT team, or a lawyer. Here is how GDPRWise stands in for the four roles a small firm is missing.
push_pinEditor's pickHow GDPRWise WorksHow Does the GDPRWise Scan Work?
Curious what happens when GDPRWise scans your website? This article explains how the scan works, what it detects and what results you get within 2 minutes.
push_pinEditor's pickHow GDPRWise WorksYour Third-Party Dossier: With Whom Is Data Shared?
Most of the time you are just using a service, but the sharing of personal data is a side effect. Your third-party dossier maps all external services where third parties are involved in personal data processing.
Recent articles
How data sharing agreements work in GDPRWise: send, negotiate, accept
GDPRWise drafts a data sharing agreement from your Third-Party Dossier and sends the other party a link. They can accept, request changes or decline without an account; you answer with a new version until one is accepted.
GDPR ObligationsAre you a processor or controller as a SaaS provider?
As a SaaS provider, you can be a processor for your customers and a controller for your own activities. Assess your role for each processing activity and align your agreements and privacy documentation accordingly.
HR & RecruitmentCan you require employees to share their live location?
Employee location monitoring may be lawful under certain conditions, but sharing a live location throughout the working day is not a default solution. Choose a method that meets your specific need and processes as little personal data as possible.
NewsEmail Tracking Under Scrutiny: Is Your Organisation Prepared?
The French regulator CNIL clarifies that tracking pixels in emails often require prior consent under the ePrivacy rules. What does that mean for your newsletters and email marketing?
Rights & RequestsData Subject Request Mistakes That Cost SMEs Fines
Six common mistakes SMEs make when handling data subject requests, with real enforcement examples and practical advice on how to avoid them. From ignoring requests to panic-deleting data.
SecurityWhen an Employee Leaves: How to Handle Their Email Account
When someone leaves your company, you cannot simply take over or delete their work email account. A Norwegian firm learned this the hard way with a 14,700 EUR fine. Here is how to handle departing employees' accounts under the GDPR.