Cybersecurity Policy Report, Spain Highlights Its GDPR Compliance Tools, (Jun 6, 2024)

By R. Jason Howard, J.D.

The Spanish Data Protection Authority, Agencia Española de Protección de Datos (AEPD), has published a blog highlighting the tools that the agency offers to assist data controllers and processors in complying with the obligations imposed by data protection regulations.

Notably, the blog invites the public to discover the eight free tools the agency has developed to assist in decision making: Facilita RGPD; Facilita Emprende (facilitates entrepreneurship); Manage GDPR; Evalúa-Riesgo RGPD (evaluate GDPR risk); ValidaCripto RGPD (validate GDPR Crypto); DPD Channel; Gap Advisor; and Comunica-Brecha (communicate GDPR Gap).

Two of the eight tools offer questionnaires to assist in addressing compliance. Another includes almost 800 privacy measures classified based on risk and includes “aspects such as governance, security and management of personal data breaches.” One tool allows for an initial evaluation to be carried out to identify inherent risk factors for the rights and freedoms of people. Another tool helps in evaluating encryption systems, and one responds to queries that data protection delegates from the public and private sectors have raised with the AEPD.

Two of the eight tools relate to personal data breaches. One “helps those responsible decide whether they should notify a personal data breach to the supervisory authority,” and the other “assists any organization responsible for processing personal data in the obligation to communicate a personal data breach to those affected.”

News: InternationalLegislation DataSecurity DataBreach GDPR LitigationEnforcement