[38;5;12m                                                                               [39m[38;2;255;187;0m[1m[4mAwesome GDPR [0m[38;5;14m[1m[4m![0m[38;2;255;187;0m[1m[4mAwesome[0m[38;5;14m[1m[4m (https://awesome.re/badge-flat.svg)[0m[38;2;255;187;0m[1m[4m (https://awesome.re)[0m

[38;5;12m (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679)[39m

[38;5;12mThe[39m[38;5;12m [39m[38;5;12mGeneral[39m[38;5;12m [39m[38;5;12mData[39m[38;5;12m [39m[38;5;12mProtection[39m[38;5;12m [39m[38;5;12mRegulation[39m[38;5;12m [39m[38;5;12m(GDPR)[39m[38;5;12m [39m[38;5;12mis[39m[38;5;12m [39m[38;5;12ma[39m[38;5;12m [39m[38;5;12mregulation[39m[38;5;12m [39m[38;5;12mon[39m[38;5;12m [39m[38;5;12mdata[39m[38;5;12m [39m[38;5;12mprotection[39m[38;5;12m [39m[38;5;12mand[39m[38;5;12m [39m[38;5;12mprivacy[39m[38;5;12m [39m[38;5;12mfor[39m[38;5;12m [39m[38;5;12mall[39m[38;5;12m [39m[38;5;12mindividuals[39m[38;5;12m [39m[38;5;12mwithin[39m[38;5;12m [39m[38;5;12mthe[39m[38;5;12m [39m[38;5;12mEuropean[39m[38;5;12m [39m[38;5;12mUnion[39m[38;5;12m [39m[38;5;12mand[39m[38;5;12m [39m[38;5;12mthe[39m[38;5;12m [39m[38;5;12mEuropean[39m[38;5;12m [39m[38;5;12mEconomic[39m[38;5;12m [39m[38;5;12mArea.[39m[38;5;12m [39m[38;5;12mThe[39m[38;5;12m [39m[38;5;12mregulation[39m[38;5;12m [39m[38;5;12mhas[39m[38;5;12m [39m[38;5;12mincreased[39m[38;5;12m [39m[38;5;12mthe[39m[38;5;12m [39m[38;5;12mfocus[39m[38;5;12m [39m[38;5;12mon[39m[38;5;12m [39m[38;5;12mprivacy[39m[38;5;12m [39m[38;5;12min[39m[38;5;12m [39m[38;5;12mcompanies[39m[38;5;12m [39m
[38;5;12mand[39m[38;5;12m [39m[38;5;12mstrengthened[39m[38;5;12m [39m[38;5;12mthe[39m[38;5;12m [39m[38;5;12mdata[39m[38;5;12m [39m[38;5;12msubjects[39m[38;5;12m [39m[38;5;12minfluence.[39m

[38;2;255;187;0m[4mContents[0m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mLegal text[0m[38;5;12m (#legal-text)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mGuidelines[0m[38;5;12m (#Guidelines)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mRights of the data subject (art. 12 - 23)[0m[38;5;12m (#rights-of-the-data-subject-art-12---23)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mPrivacy by Design - Guides for developers (art. 25)[0m[38;5;12m (#privacy-by-design---guides-for-developers-art-25)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mRecords of Processing (art. 30)[0m[38;5;12m (#records-of-processing-art-30)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mSecurity (art. 32)[0m[38;5;12m (#security-art-32)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mIncident management (art. 33 and 34)[0m[38;5;12m (#incident-management-art-33-and-34)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mData Protection Impact Assessments (DPIA, art. 35)[0m[38;5;12m (#data-protection-impact-assessments-dpia-art-35)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mTools[0m[38;5;12m (#tools)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mData Protection Authorities[0m[38;5;12m (#data-protection-authorities-art-51--59)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mOrganisations / Projects[0m[38;5;12m (#organisations--projects)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mPublications[0m[38;5;12m (#Publications)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mSolutions providers[0m[38;5;12m (#Solutions-providers)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mRelated[0m[38;5;12m (#Related)[39m

[38;2;255;187;0m[4mLegal text[0m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mGDPR (2016/679)[0m[38;5;12m (https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN) - Official version of GDPR.[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mGDPR-info[0m[38;5;12m (https://gdpr-info.eu/) - GDPR linked to relevant articles and section in the preamble (Non-official site).[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mGDPR-expert[0m[38;5;12m (https://www.gdpr-expert.com/home.html?mid=5) - Compare the Regulation, Directive and National legislation. Linked to relevant section in preamble (Non-official site).[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mGDPRhub -> GDPR Articles[0m[38;5;12m (https://gdprhub.eu/index.php?title=Category:GDPR_Articles) - GDPR articles included commentary.[39m
[38;5;12m  [39m
[38;2;255;187;0m[4mGuidelines[0m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mGuidelines[0m[38;5;12m [39m[38;5;12m(https://edpb.europa.eu/our-work-tools/general-guidance/gdpr-guidelines-recommendations-best-practices_en)[39m[38;5;12m [39m[38;5;12m&[39m[38;5;12m [39m[38;5;14m[1mOpinions[0m[38;5;12m [39m[38;5;12m(https://edpb.europa.eu/our-work-tools/consistency-findings/opinions_en)[39m[38;5;12m [39m[38;5;12mfrom[39m[38;5;12m [39m[38;5;12mthe[39m[38;5;12m [39m[38;5;12mEuropean[39m[38;5;12m [39m[38;5;12mData[39m[38;5;12m [39m
[38;5;12mProtection[39m[38;5;12m [39m[38;5;12mBoard[39m[38;5;12m [39m[38;5;12m(EDPB).[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mICO: Guide to GDPR[0m[38;5;12m (https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mHandbook on European data protection law [0m[38;5;12m (https://publications.europa.eu/en/publication-detail/-/publication/5b0cfa83-63f3-11e8-ab9c-01aa75ed71a1) - Handbook issued by EU.[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mFactsheets[0m[38;5;12m (https://edps.europa.eu/data-protection/our-work/our-work-by-type/factsheets_en) - Factsheets from EU Data Protection Supervisor.[39m
[38;5;12m  [39m
[38;2;255;187;0m[4mRights of the data subject (art. 12 - 23)[0m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mOpen source privacy notice template (Juro)[0m[38;5;12m (https://github.com/juro-privacy/free-privacy-notice)[39m

[38;2;255;187;0m[4mPrivacy by Design - Guides for developers (art. 25)[0m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mCNIL - GDPR Developer Guide[0m[38;5;12m (https://github.com/LINCnil/GDPR-Developer-Guide)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mNorwegian DPA - Software development with Data Protection by Design and by Default[0m[38;5;12m (https://www.datatilsynet.no/en/about-privacy/virksomhetenes-plikter/data-protection-by-design-and-by-default/)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mData Pseudonymisation: Advanced Techniques and Use Cases[0m[38;5;12m (https://www.enisa.europa.eu/publications/data-pseudonymisation-advanced-techniques-and-use-cases/) - Report on pseudonymisation techniques from ENISA.[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mAnonymisation, pseudonymisation and privacy enhancing technologies guidance - ICO[0m
[38;5;12m (https://ico.org.uk/about-the-ico/ico-and-stakeholder-consultations/ico-call-for-views-anonymisation-pseudonymisation-and-privacy-enhancing-technologies-guidance/)[39m

[38;2;255;187;0m[4mRecords of Processing (art. 30)[0m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mIubenda - Register of data processing activities[0m[38;5;12m (https://www.iubenda.com/en/internal-privacy-management)[39m

[38;2;255;187;0m[4mSecurity (art. 32)[0m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mOWASP Top 10[0m[38;5;12m (https://owasp.org/www-project-top-ten/) - Top 10 Web Application Security Risks.[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mOWASP Cheat Sheet Series[0m[38;5;12m (https://cheatsheetseries.owasp.org/) - Concise collection of high value information on specific application security topics.[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mAnonymisation, pseudonymisation and privacy enhancing technologies guidance[0m
[38;5;12m (https://ico.org.uk/about-the-ico/ico-and-stakeholder-consultations/ico-call-for-views-anonymisation-pseudonymisation-and-privacy-enhancing-technologies-guidance/)[39m

[38;2;255;187;0m[4mIncident management (art. 33 and 34)[0m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mENISA: Recommendations for a methodology of the assessment of severity of personal data breaches[0m[38;5;12m (https://www.enisa.europa.eu/publications/dbn-severity)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mGoogle, SRE: Managing Incidents[0m[38;5;12m (https://landing.google.com/sre/sre-book/chapters/managing-incidents/)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mTroy Hunt: Data breach disclosure 101[0m[38;5;12m (https://www.troyhunt.com/data-breach-disclosure-101-how-to-succeed-after-youve-failed/)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mAwesome Incident Response[0m[38;5;12m (https://github.com/meirwah/awesome-incident-response)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mGDPR Enforcement Tracker[0m[38;5;12m (http://www.enforcementtracker.com/) - Overview of fines and penalties.[39m

[38;2;255;187;0m[4mData Protection Impact Assessments (DPIA, art. 35)[0m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mOpen-source DPIA software from the French DPA[0m[38;5;12m (https://www.cnil.fr/en/open-source-pia-software-helps-carry-out-data-protection-impact-assesment)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mGuidelines on Data Protection Impact Assessment (WP29)[0m[38;5;12m (https://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=611236)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mISO-standard: Guidelines for privacy impact assessment[0m[38;5;12m (https://www.iso.org/standard/62289.html)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mDPIA template from ICO[0m[38;5;12m (https://iapp.org/resources/article/sample-dpia-template/)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mPublic DPIA Teams OneDrive SharePoint and Azure AD[0m
[38;5;12m (https://www.rijksoverheid.nl/documenten/publicaties/2022/02/21/public-dpia-teams-onedrive-sharepoint-and-azure-ad) -  DPIA of Microsoft Teams in combination with OneDrive, SharePoint Online and the Azure Active Directory.[39m

[38;2;255;187;0m[4mTools[0m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mWebsite Evidence Collector (WEC)[0m[38;5;12m (https://github.com/EU-EDPS/website-evidence-collector) - EDPS Inspection Software.[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mData protection around the world[0m[38;5;12m (https://www.cnil.fr/en/data-protection-around-the-world) - (CNIL) Map of the level of data protection in each country. [39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mData Protection Laws of the world[0m[38;5;12m (https://www.dlapiperdataprotection.com/) - (DLA Piper) Compare data protection laws around the world.[39m
[38;5;12m [39m
[38;2;255;187;0m[4mData Protection Authorities (art. 51 -59)[0m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mEuropean Data Protection Board[0m[38;5;12m (https://edpb.europa.eu/) - EDPB.[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mEuropean Data Protection Supervisor[0m[38;5;12m (https://edps.europa.eu/) - EDPS.[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mEuropean Union Agency for Network and Information Security (ENISA)[0m[38;5;12m (https://www.enisa.europa.eu/topics/data-protection) - ENISA.[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mList of Data Protection Authorities[0m[38;5;12m (https://pdpecho.com/the-list/)[39m
[38;5;12m  [39m
[38;2;255;187;0m[4mOrganisations / Projects[0m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mElectronic Frontier Foundation[0m[38;5;12m (https://www.eff.org/) - Nonprofit defending digital privacy, free speech, and innovation.[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mInternational Association of Privacy Professionals[0m[38;5;12m (https://iapp.org/) - A resource for privacy professionals.[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mPrivacy International[0m[38;5;12m (https://www.privacyinternational.org) - Charity that challenges the governments and companies that want to know everything about individuals, groups, and whole societies.[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mNOYB[0m[38;5;12m (https://noyb.eu/) - Organisation that brings important issues to the attention of DPAs, enforces the law in civil court or directly engages with companies.[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mGDPR.eu[0m[38;5;12m (https://gdpr.eu/) - Resource for organisations and individuals researching the GDPR (Not official website).[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mCyLab Usable Privacy and Security Laboratory[0m[38;5;12m (https://cups.cs.cmu.edu/) - Research related to understand and improving the usability of privacy and security.[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mEPIC[0m[38;5;12m (https://epic.org/) - Electronic Privacy Information Center.[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mFuture of Privacy Forum[0m[38;5;12m (https://fpf.org/) - Catalyst for privacy leadership and scholarship, advancing principled data practices in support of emerging technologies.[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mW3C Privacy Interest Group[0m[38;5;12m (https://www.w3.org/Privacy/) - Leading the web to its full potential.[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mCISPE Code of Conduct[0m[38;5;12m (https://www.codeofconduct.cloud/) - Pan-European sector-specific code for cloud infrastructure service providers under Article 40.[39m

[38;2;255;187;0m[4mPublications[0m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mGDPR Today[0m[38;5;12m (https://www.gdprtoday.org/) - Privacy news from the Open Rights Group.[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mSpread Privacy[0m[38;5;12m (https://spreadprivacy.com/) - DuckDuckGo Blog.[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mFreedom To Tinker[0m[38;5;12m (https://freedom-to-tinker.com/) - Blog from Princeton's CITP, a research center that studies digital technologies in public life.[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mpdpEcho[0m[38;5;12m (https://pdpecho.com/) - All about personal data protection and privacy, by Gabriela Zanfir-Fortuna.[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mGDPRhub[0m[38;5;12m (https://gdprhub.eu/) - Free and open wiki that allows anyone to find and share GDPR insights across Europe.[39m
[48;5;235m[38;5;249m[49m[39m
[38;2;255;187;0m[4mRelated[0m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mPrivacy Respecting[0m[38;5;12m (https://github.com/nikitavoloboev/privacy-respecting)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mAwesome: Security[0m[38;5;12m (https://github.com/sindresorhus/awesome#security)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mAwesome: Humane Tech[0m[38;5;12m (https://github.com/humanetech-community/awesome-humane-tech#readme)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mAwesome: Privacy[0m[38;5;12m (https://github.com/pluja/awesome-privacy#readme) - List of free, open source and privacy respecting services and alternatives to privative services.[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mDevelopers Guide to HIPAA Compliance[0m[38;5;12m (https://github.com/truevault/hipaa-compliance-developers-guide)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mAnalytics without cookies[0m[38;5;12m (https://www.gocookieless.com/)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mEuropean web analytics services[0m[38;5;12m (https://european-alternatives.eu/category/web-analytics-services)[39m
[48;5;12m[38;5;11m⟡[49m[39m[38;5;12m [39m[38;5;14m[1mEU Alternatives[0m[38;5;12m (https://dasprive.be/eu-alternatives/)[39m

[38;2;255;187;0m[4mLicense[0m
[38;5;14m[1m![0m[38;5;12mCC0[39m[38;5;14m[1m (http://mirrors.creativecommons.org/presskit/buttons/88x31/svg/cc-zero.svg)[0m[38;5;12m (https://creativecommons.org/publicdomain/zero/1.0/)[39m

[38;5;12mTo the extent possible under law, Harald O. Bakke has waived all copyright and related or neighboring rights to this work.[39m
