Framework library · European Union

GDPR

GDPR — General Data Protection Regulation. Published by European Parliament & Council, version Regulation (EU) 2016/679. Kapālins maps it to 10 controls. 5 of 10 controls are proved by a live signal from the platform, and 5 by the assessment.

Read the source document

Controls mapped
GDPR-5Principles of processingLive signal
GDPR-6Lawfulness of processingAssessment
GDPR-17Right to erasureAssessment
GDPR-22Automated individual decision-making & profilingLive signal
GDPR-25Data protection by design & by defaultLive signal
GDPR-28Processors and sub-processorsAssessment
GDPR-32Security of processingLive signal
GDPR-33Notification of a personal data breach to the supervisory authority (72 hours)Live signal
GDPR-35Data protection impact assessmentAssessment
GDPR-44International transfers (Ch.V)Assessment

Live signal: a signal from the gateway, probes or device sensor proves it continuously. Assessment: it is evidenced by answers to the assessment. Both are exported in the regulator evidence pack.

History

How GDPR got here.

  1. Proposed

    The European Commission proposed the General Data Protection Regulation, COM(2012) 11. EUR-Lex

  2. Adopted

    Regulation (EU) 2016/679 adopted; published in the Official Journal on 4 May 2016. EUR-Lex

  3. In force

    The GDPR entered into force. EUR-Lex

  4. In force

    The GDPR began to apply across the EU. EUR-Lex

  5. Proposed

    The Commission proposed GDPR amendments in the Digital Omnibus, COM(2025) 837. European Commission (copy hosted by Table.Media)

See this framework on your estateAll 29 frameworks