EU
GDPR
The EU regulation on how personal data of people in the EU is collected, used and protected.
Who it applies to
Any organisation, anywhere, that handles personal data of people in the EU.
What it can cost
Up to €20 million or 4% of worldwide annual turnover, whichever is higher.
- In force since
- 25 May 2018
- Breach notice
- To the authority within 72 hours
- Security article
- Article 32, security of processing
What GDPR asks of you
- 01Lawful basis and records of processing
- 02Data subject rights
- 03Security of processing
- 04Breach notification
- 05Data protection impact assessments
- 06International transfers
How orta covers GDPR
34 GDPR requirements, mapped
Each requirement is linked to orta's common controls, so evidence you already have counts here too.
Checked from your own systems
Host, Kubernetes and AWS checks run on a schedule and mark controls passing or failing, every day.
Policies drafted from a conversation
orta interviews your team by voice or text, asks only what GDPR needs, and drafts the policy set from the answers.
Ready for your auditor
Give them a read-only login to see controls, evidence and documents in one place.
What feeds it
- Continuous complianceA passing check counts in every framework that needs it.
- Cloud postureYour cloud accounts, checked. Your data, left where it is.
- Runtime detectionCatch the attack while it is happening.
- Risk managementRisk that moves with reality.
