Knowledge Base
Practical GDPR guides for SME owners. Step-by-step explanations without legal jargon, written for non-lawyers.
Quick check that you are not a bot
Bruno does not like bots :-) This only takes a few seconds.
Bruno is an AI assistant. Answers are general guidance, not legal advice. Please do not put names or other personal data in your question. How we handle your question
Learn GDPR
Plain-English guides for SME owners
GDPR Obligations
Processing register, DPO, DPIA and all other obligations imposed by the GDPR.
Rights & Requests
Access requests, right to erasure and other data subject rights.
Security
Technical and organizational measures to protect personal data.
Misconceptions
Common misconceptions about the GDPR, and what's actually true.
Templates
Ready-to-use templates for privacy statements, DPAs and more.
HR & Recruitment
GDPR in recruitment and selection, applicant data, talent pools and staff records.
How GDPRWise Works
Step-by-step explanation of how GDPRWise helps you with GDPR compliance.
News
Enforcement cases, fines and news from the privacy world.
How GDPR-compliant is your site right now?
Free scan, no account, results in 2 minutes.
Courses
Free, multilingual GDPR training for SMEs. Learn the essentials at your own pace, with a free practice quiz per course.
Featured
Hand-picked articles worth reading first.
Recruitment & GDPR: A Practical Checklist for Employers
A step-by-step GDPR checklist for recruitment, from defining what applicant data you need through to deleting it, covering privacy information, providers, screening, talent pools and AI.
push_pin Editor's pick GDPR ObligationsGDPR Minimum: Transparency First, Then Grow Into the Rest
The honest, smallest version of GDPR for a business that just started: what transparency actually requires, the five must-do's, and how to mature as you grow.
push_pin Editor's pick Rights & RequestsHow to Set Up a Data Subject Request Process
A step-by-step guide to building a reliable process for handling GDPR data subject requests. From designating a contact point to documenting every step, this article covers everything an SME needs to handle requests correctly and on time.
push_pin Editor's pick How GDPRWise WorksGDPR With No In-House Expertise: How Small Firms Cope
Small firms carry the same GDPR obligations as a corporation, but without a DPO, an IT team, or a lawyer. Here is how GDPRWise stands in for the four roles a small firm is missing.
push_pin Editor's pick How GDPRWise WorksHow Does the GDPRWise Scan Work?
Curious what happens when GDPRWise scans your website? This article explains how the scan works, what it detects and what results you get within 2 minutes.
push_pin Editor's pick How GDPRWise WorksYour Third-Party Dossier: With Whom Is Data Shared?
Most of the time you are just using a service, but the sharing of personal data is a side effect. Your third-party dossier maps all external services where third parties are involved in personal data processing.
Recent articles
Review Your AI Use and Set Your AI Permissible Use Policy in GDPRWise
A step-by-step guide for the GDPR coordinator: inventory the AI tools your staff use, add them as systems, link the vendor and the processes, set a rule per tool and generate your AI Permissible Use Policy in the GDPRWise app.
HR & RecruitmentHow Can You Manage Workplace Health Risks Without Asking Applicants for Medical Details?
Workplace safety can require health information, but it does not justify unrestricted medical questions in recruitment. Learn what employers need to know and what belongs with occupational health.
NewsEmail Tracking Under Scrutiny: Is Your Organisation Prepared?
The French regulator CNIL clarifies that tracking pixels in emails often require prior consent under the ePrivacy rules. What does that mean for your newsletters and email marketing?
GDPR ObligationsWhat Must Be in Your Cookie Policy?
A cookie policy is more than a paragraph of text. For every cookie you must list the name, provider, purpose, retention period and legal basis. This article explains exactly what belongs in it, why a template usually falls short, and how to keep it current.
Rights & RequestsData Subject Request Mistakes That Cost SMEs Fines
Six common mistakes SMEs make when handling data subject requests, with real enforcement examples and practical advice on how to avoid them. From ignoring requests to panic-deleting data.
SecurityWhen an Employee Leaves: How to Handle Their Email Account
When someone leaves your company, you cannot simply take over or delete their work email account. A Norwegian firm learned this the hard way with a 14,700 EUR fine. Here is how to handle departing employees' accounts under the GDPR.