gdpr-compliance

1# GDPR Compliance
2 
3Implement General Data Protection Regulation requirements for organizations that process personal data of EU/EEA residents, covering lawful processing, data subject rights, and technical safeguards.
4 
5## When to Use
6 
7- Processing personal data of EU/EEA residents in any capacity
8- Building consent management and preference centers
9- Implementing Data Subject Access Request (DSAR) workflows
10- Conducting Data Protection Impact Assessments (DPIAs)
11- Setting up data processing agreements with third-party processors
12- Designing systems with privacy by design and by default principles
13 
14## Key Principles and Legal Bases
15 
16```yaml
17gdpr_principles:
18  article_5:
19    lawfulness_fairness_transparency:
20      description: "Process data lawfully, fairly, and transparently"
21      implementation:
22        - Document legal basis for every processing activity
23        - Provide clear privacy notices
24        - No hidden or deceptive data collection
25 
26    purpose_limitation:
27      description: "Collect for specified, explicit, and legitimate purposes"
28      implementation:
29        - Define purpose before collection
30        - Do not repurpose data without new legal basis
31        - Document all processing purposes in ROPA
32 
33    data_minimization:
34      description: "Adequate, relevant, and limited to what is necessary"
35      implementation:
36        - Collect only required fields
37        - Review data models for unnecessary fields
38        - Remove optional fields that are not used
39…