For Organisations

For Organisations

The following pages will provide information about organisational obligations under data protection legislation and the General Data Protection Regulation, including transparency with service users and how to respond to an individual who is exercising their data protection rights.

Data Protection Basics

This section contains information about the basics of data protection, the principles of data protection, and a glossary of frequently used terms.

Know Your Obligations

This section contains information about the obligations placed on organisations under data protection law.

Codes of Conduct

This section contains information about Codes of Conduct under Articles 41 and 42 GDPR.

GDPR Certification

This section contains information about Certification under Articles 42 and 43 GDPR.

Resources for Organisations

This section includes a number of resources available for organisations, including a self-assessment checklist, a guide to the DPC's complaint handling process, and information on the Law Enforcement Directive.

Rules for Electronic and Direct Marketing

This section contains information about the responsibilities of organisations using personal data for direct marketing purposes, including information on the National Directory Database and on electronic receipts.

International Transfers

This section contains information about the topic of international transfers under data protection law, including cross-border processing under the One Stop Shop mechanism, and transfers to international organisations or third countries.

Infographics

This section contains downloadable printable infographics, each giving an overview of a different aspect of Data Protection.

The DPC publishes guidance to promote public awareness and understanding of risks, rules, safeguards and rights under data protection law. Guidance does not constitute legal advice and is not legally binding on the DPC.