Regulation
What is the GDPR?
Also known as: General Data Protection Regulation, AVG
The GDPR (Regulation (EU) 2016/679) is the EU law that governs how organisations collect, use, store and protect personal data, and gives people rights over their data.
It requires a lawful basis for every processing activity, data protection by design and by default, records of processing, data processing agreements with processors, security of processing, breach notification to the authority within 72 hours where required, and data protection impact assessments for high-risk processing.
How Clateway helps
- GRC and compliance software with AI – AI-powered GRC software: generate ISO 27001, NIS2, DORA and GDPR policies, run your Statement of Applicability, controls, audit findings and management review in one place.
- AI governance for the enterprise – Use AI safely across your organisation: guardrails per company, private AI routing, zero data retention, AI activity logs, rate limits and an AI kill switch.