GDPR Obligations, Tracked Article by Article
The EU General Data Protection Regulation applies to any organisation handling the personal data of people in the EU, wherever the organisation is based.
CAPA-21PrinciplesIn progressCAPA-24Data Subject RightsOverdueHow GDPR Is Organised in Arbor
GDPR loads with its key areas, ready to assign and assess.
- 01Principles
- 02Lawful Basis
- 03Data Subject Rights
- 04Accountability and Records
- 05Security and Breach Notification
- 06International Transfers
- 07Supervisory Authorities
What Arbor Does with GDPR
- Obligations loaded article by article
- Records of processing shared with your UAE PDPL work
- Data subject requests tracked to deadline
No Clause Numbers to Memorise
Arbor AI suggests the GDPR requirements that apply as you work.
GDPR in Four Steps
Load
GDPR loads with its full structure, kept up to date by our team.
Set Scope
Decide what applies and record the reason.
Assess
Assign owners, score each requirement and link evidence.
Prove
Close gaps with corrective actions and report with confidence.
Do the Work Once for GDPR
Where controls overlap, shared evidence counts toward related frameworks, so nothing is done twice.
Frequently Asked Questions
Is GDPR Kept Up to Date?
Yes. Our team loads GDPR and updates it when the standard changes.
Can We Import Our Existing GDPR Assessment?
Yes. Use the Excel template and Arbor checks every row before it loads.
Can GDPR Share Evidence with Other Frameworks?
Yes. Evidence is uploaded once and linked to every requirement it supports.
See GDPR in Arbor GRC
Bring your current risk register. We can import it from Excel during the demo, so you see your own risks in Arbor, not ours.