Managing GDPR obligations with Riskophia
General Data Protection Regulation (European Union)
What it is
The European Union's data protection regulation. It applies to organizations established in the EU and to those outside it that offer goods or services to, or monitor the behaviour of, people in the EU.
Who it applies to
Organizations anywhere that process personal data of people in the EU in the course of offering goods or services or monitoring behaviour, including Canadian companies with EU customers or users.
Representative obligations
- Lawful basis and transparency
- Data subject rights and response deadlines
- Records of processing activities
- Data protection impact assessments
- Processor agreements and international transfers
- Breach notification to the supervisory authority within 72 hours
- Data protection officer where required
This list is illustrative and is not legal advice. Your obligations depend on your activities, jurisdictions and the current text of the law.
From GDPR text to evidence on file.
Riskophia helps you manage the compliance activities associated with GDPR. It does not by itself make you compliant or approved; that depends on your practices and on the relevant regulator.
Requirements register
GDPR obligations broken into plain-language requirements with owners, cadence and status.
Policies and attestations
Policy templates aligned to GDPR, version controlled and acknowledged by the right roles.
Training records
Mandatory training assigned by role through Learnophia, with completion recorded as evidence.
Evidence and gaps
Evidence linked to each requirement; gaps become owned actions with verified closure.
Crosswalk
Where GDPR overlaps other regulations and standards, one control and one piece of evidence serve all of them.
Export
An inspection-ready package of status, evidence and history for GDPR.
See your GDPR obligations in Riskophia.
Book a 30-minute demo led by a compliance professional, or talk to an expert about your sector.