Complass
GDPR basics: organising data protection you can demonstrate
One email, one access request, one month: what the GDPR requires from every company – and how to organise data protection so that you can demonstrate it at any time.
The General Data Protection Regulation applies to every company that processes personal data, regardless of size and sector. Its core is accountability: whoever processes data must comply with the principles and be able to demonstrate it (Art. 5(2) GDPR).
The whitepaper opens with an access request from a former applicant and from there walks through roles, principles and legal bases, the record of processing activities, data subject rights, service providers and third countries, technical and organisational measures, impact assessment, data breaches and supervision – with a nine-step roadmap and a checklist.
Each obligation chapter includes a short "Implementation in Complass" box; only features already live are named.
16 pages · Version 1.0 · as of 06.10.2026 · Author Marc Linden, Complass GmbH i. G.
Try Complass with your own data
Set up your trial yourself, with a sample project per framework if you like. If you would rather see Complass first, request a demo.