What is a GDPR framework?

A GDPR framework is a structured system that helps organisations comply with the General Data Protection Regulation by providing operational controls, documentation templates, and compliance tracking for data protection requirements.

Do I need GDPR compliance software?

Organisations processing personal data of EU residents must comply with GDPR. GDPR compliance software simplifies implementation, automates documentation, and helps maintain ongoing compliance.

What's the difference between a data controller and data processor?

A data controller determines the purposes and means of processing personal data, while a data processor handles data on behalf of a controller. Both have specific GDPR obligations.

Can I reuse GDPR documentation for other frameworks?

Yes, many GDPR controls overlap with ISO 27001, NIS2, and other frameworks. The .legal platform allows you to reuse documentation across multiple compliance requirements.

How does GDPR relate to ISO 27001?

ISO 27001 information security controls directly support GDPR's requirements for technical and organisational measures. Many organisations implement both frameworks simultaneously.

What are Records of Processing Activities (RoPA)?

RoPA is a GDPR requirement to document all processing activities. It's also known as an Article 30 register and provides a comprehensive overview of how personal data is processed within an organisation.

How can I implement GDPR compliance?

Start with data mapping, establish processing activities, implement security measures, and create necessary documentation. The GDPR Framework provides templates and guidance throughout the implementation process.

What are data subject rights under GDPR?

Data subjects have rights including access, rectification, erasure, restriction of processing, data portability, and objection to processing. The GDPR Framework helps organisations manage and respond to these rights requests.

FRAMEWORK .legal | GDPR Framework

GDPR compliance software interface displaying framework overview with data controller and processor role selection

GDPR framework integration showing connections to ISO 27001, NIS2, AI Act, and ePrivacy frameworks

GDPR FRAMEWORK Systematic Data Protection With GDPR

Implement concrete controls for data protection and privacy in accordance with the EU General Data Protection Regulation (2016/679). The GDPR Framework covers all operational requirements: processing principles, data subject rights, controller and processor obligations, and international transfers, with automatic mapping to specific GDPR articles and built-in compliance tracking.

Choose your GDPR role:

Data Controller For organisations that determine the purposes and means of processing personal data. Covers privacy by design, impact assessments, breach notifications, and international data transfers.
Data Processor For organisations that process personal data on behalf of a controller (e.g., service providers, vendors, subsidiaries). Focuses on processor-specific obligations and security requirements.

Dashboard displaying over 400 companies using .legal GDPR compliance platform

GDPR FRAMEWORK Build upon your existing compliance work

The GDPR Framework integrates seamlessly with your existing compliance programmes. Security controls often satisfy both GDPR and information security requirements, and documentation can be reused across frameworks.

Examples of overlapping frameworks:

ISO 27001 Information security management directly supports GDPR's requirements for technical and organisational measures to protect personal data.
NIS2 Incident handling and security measures overlap with GDPR's breach notification obligations and security requirements.
AI Act Transparency and documentation requirements share common ground with GDPR's principles around lawful processing and data subject rights.
ePrivacy Cookie consent and communication privacy build upon GDPR's legal basis requirements and complement your data protection efforts.

Read more about Frameworks

+400

companies
+10.000

users
+79.000

contracts
+14.000

processing activities

Lægeforeningen Michael Berner (Lawyer)

.legal has been the right choice for us. .legal are professional and welcoming with skilled employees.
Min By Media Tinna Schultz (HR manager)

It just works! It is so easy and user-friendly, and the overview of processing activities is brilliant.
Bech-Bruun Mikkel Friis Rossa (Partner)

.legal's team has consistently demonstrated a commitment to innovation while being responsive to the needs of our mutual clients.
DMJX Kaspar Rochholz (GDPR coordinator)

.legal has really understood what it means to create a user-friendly and efficient solution. Privacy is an attractive product compared to price and functionality.
Axel Kaufmann ApS Julie Lundkvist Andreasen (Lawyer and Head of Customer Service)

.legal continuously update the platform to ensure their customers always remain compliant. In our view, any other choice would be a downgrade.
Molecule Consultancy Nanna Rodian Christensen (HR & Operational Manager)

Firstly, it means that not all the work is in one place (me), and secondly, that the understanding of GDPR is implemented throughout the organisation.
Fenerum Rasmus Boutrup (Financial Controller)

With .legal, we've gained a simpler and more manageable solution that better suits our needs
Novicell Julie Oxenvad (Legal Consultant)

We are satisfied with the switch to .legal – it has strengthened our compliance work, made processes easier to manage and more transparent, and improved cross-team collaboration

.legal Compliance Hub

Read all about .legals compliance on our compliance hub.

ISAE 3402

Get a copy of .legal A/S's latest ISAE3402 (type 2) IT security statement

ISAE 3402 statement
ISAE 3000

Get a copy of .legal A/S's latest ISAE3000 (type 2) statement of our GDPR compliance

ISAE 3000 statement
Data Processing Agreement (DPA)

Find .legal A/S's data processing agreement here.

Data processing agreement
IT security

All .legal A/S's implemented and approved IT security measures are described here.

IT Security Measures