Complass
Privacy in day-to-day operations
A letter from the supervisory authority, an access request, a customer asking for the TOM list – all in one week: how companies turn data protection from a project into day-to-day operations.
The GDPR requires companies to be able to demonstrate their data protection at any time (Art. 5(2) GDPR). In everyday work this means: the record of processing activities, processors, technical and organisational measures, data protection impact assessment and data subject requests must be up to date and consistent with each other.
The whitepaper shows how the five building blocks fit together, when an impact assessment is required, how the one-month deadline for data subject requests is counted, what makes good evidence towards the supervisory authority and how data protection interacts with personal data breaches, NIS2 and ISO 27001 – with an eight-step roadmap and a checklist.
Short "Implementation in Complass" boxes with screenshots show what the privacy operations module can do.
17 pages · Version 1.0 · as of 11.10.2026 · Author Marc Linden, Complass GmbH i. G.
Try Complass with your own data
Set up your trial yourself, with a sample project per framework if you like. If you would rather see Complass first, request a demo.