Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/paulveillard/cybersecurity-gdpr-compliance

A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about General Data Protection Regulation (GDPR).
https://github.com/paulveillard/cybersecurity-gdpr-compliance

appsec appsecurity compliance-automation cybercrime cybersecurity fedramp fedramp-baselines fedramp-low fedramp-medium gdpr gdpr-checklist gdpr-compliant gdpr-compliant-features gdpr-dashboard hipaa pci

Last synced: about 1 month ago
JSON representation

A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about General Data Protection Regulation (GDPR).

Awesome Lists containing this project

README 

        
# General Data Protection Regulation (GDPR): Regulatory Compliance

######  Welcome To The World of GDPR in Cybersecurity:

> A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about General Data Protection Regulation (GDPR).

> Thanks to all contributors, you're awesome and wouldn't be possible without you! Our goal is to build a categorized community-driven collection of very well-known resources.



##  `What is GDPR? `

**The General Data Protection Regulation [(GDPR)](https://gdpr.eu/)** is *a regulation that harmonizes national data privacy laws throughout the EU and enhances the protection of all EU residents with respect to their personal data.*

* This harmonization creates new rights for individuals and a set of stronger and clearer rules for businesses.

* The GDPR applies to all companies handling the personal data of EU residents, including companies established outside the EU if they offer goods or services to EU residents or monitor their behaviour.

* The GDPR entered into force on May 25, 2018.



##  `Table of Contents `

* [Legal text](#legal-text)

* [Guidelines](#Guidelines)

* [Privacy by Design - Guides for developers (art. 25)](#privacy-by-design---guides-for-developers-art-25)

* [Security (art. 32)](#security-art-32)

* [Incident management (art. 33 and 34)](#incident-management-art-33-and-34)

* [Data Protection Impact Assessments (DPIA, art. 35)](#data-protection-impact-assessments-dpia-art-35)

* [Tools](#tools)

* [Data Protection Authorities](#data-protection-authorities)

* [Organisations / Projects](#organisations--projects)

* [Publications](#Publications)

* [Solutions providers](#Solutions-providers)

* [Related](#Related)



**[`^        back to top        ^`](#)**



##  `Legal text `

* [GDPR (2016/679)](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN) - Official version of GDPR.

* [GDPR-info](https://gdpr-info.eu/) - GDPR linked to relevant articles and section in the preamble (Non-official site).

* [GDPR-expert](https://www.gdpr-expert.com/home.html?mid=5) - Compare the Regulation, Directive and National legislation. Linked to relevant section in preamble (Non-official site).

* [GDPRhub -> GDPR Articles](https://gdprhub.eu/index.php?title=Category:GDPR_Articles) - GDPR articles included commentary.

  

##  `Guidelines `

* EDPB: [Guidelines](https://edpb.europa.eu/our-work-tools/general-guidance/gdpr-guidelines-recommendations-best-practices_en) & [Opinions](https://edpb.europa.eu/our-work-tools/consistency-findings/opinions_en)

* [ICO: Guide to GDPR](https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/)

* [Handbook on European data protection law ](https://publications.europa.eu/en/publication-detail/-/publication/5b0cfa83-63f3-11e8-ab9c-01aa75ed71a1) - Handbook issued by EU.

* EDPS: [Factsheets](https://edps.europa.eu/data-protection/our-work/our-work-by-type/factsheets_en) - Factsheets from EU Data Protection Supervisor.

  

##  `Privacy by Design - Guides for developers (art. 25) `

* [CNIL - GDPR Developer Guide](https://github.com/LINCnil/GDPR-Developer-Guide)

* [Norwegian DPA - Software development with Data Protection by Design and by Default](https://www.datatilsynet.no/en/about-privacy/virksomhetenes-plikter/innebygd-personvern/data-protection-by-design-and-by-default/)

* [Data Pseudonymisation: Advanced Techniques and Use Cases](https://www.enisa.europa.eu/publications/data-pseudonymisation-advanced-techniques-and-use-cases/) - Report on pseudonymisation techniques from ENISA.



## Security (art. 32)

* [OWASP Top 10](https://owasp.org/www-project-top-ten/) - Top 10 Web Application Security Risks.

* [OWASP Cheat Sheet Series](https://cheatsheetseries.owasp.org/) - Concise collection of high value information on specific application security topics.



## Incident management (art. 33 and 34)

* [ENISA: Recommendations for a methodology of the assessment of severity of personal data breaches](https://www.enisa.europa.eu/publications/dbn-severity)

* [Google, SRE: Managing Incidents](https://landing.google.com/sre/sre-book/chapters/managing-incidents/)

* [Troy Hunt: Data breach disclosure 101](https://www.troyhunt.com/data-breach-disclosure-101-how-to-succeed-after-youve-failed/)

* [Awesome Incident Response](https://github.com/meirwah/awesome-incident-response)

* [GDPR Enforcement Tracker](http://www.enforcementtracker.com/) - Overview of fines and penalties.



## Data Protection Impact Assessments (DPIA, art. 35)

* [Open-source DPIA software from the French DPA](https://www.cnil.fr/en/open-source-pia-software-helps-carry-out-data-protection-impact-assesment)

* [Guidelines on Data Protection Impact Assessment (WP29)](https://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=611236)

* [ISO-standard: Guidelines for privacy impact assessment](https://www.iso.org/standard/62289.html)

* [DPIA template from ICO](https://iapp.org/resources/article/sample-dpia-template/)



## Tools

* [Website Evidence Collector (WEC)](https://github.com/EU-EDPS/website-evidence-collector) - EDPS Inspection Software.

* [Data protection around the world](https://www.cnil.fr/en/data-protection-around-the-world) - (CNIL) Map of the level of data protection in each country. 

* [Data Protection Laws of the world](https://www.dlapiperdataprotection.com/) - (DLA Piper) Compare data protection laws around the world.

 

## Data Protection Authorities 

* [European Data Protection Board](https://edpb.europa.eu/) - EDPB.

* [European Data Protection Supervisor](https://edps.europa.eu/) - EDPS.

* [European Union Agency for Network and Information Security (ENISA)](https://www.enisa.europa.eu/topics/data-protection) - ENISA.

* [List of Data Protection Authorities](https://pdpecho.com/the-list/)



**[`^        back to top        ^`](#)**

  

## Organisations / Projects

* [Electronic Frontier Foundation](https://www.eff.org/) - Nonprofit defending digital privacy, free speech, and innovation.

* [International Association of Privacy Professionals](https://iapp.org/) - A resource for privacy professionals.

* [Privacy International](https://www.privacyinternational.org) - Charity that challenges the governments and companies that want to know everything about individuals, groups, and whole societies.

* [NOYB](https://noyb.eu/) - Organisation that brings important issues to the attention of DPAs, enforces the law in civil court or directly engages with companies.

* [GDPR.eu](https://gdpr.eu/) - Resource for organisations and individuals researching the GDPR (Not official website).

* [CyLab Usable Privacy and Security Laboratory](https://cups.cs.cmu.edu/) - Research related to understand and improving the usability of privacy and security.

* [EPIC](https://epic.org/) - Electronic Privacy Information Center.

* [Future of Privacy Forum](https://fpf.org/) - Catalyst for privacy leadership and scholarship, advancing principled data practices in support of emerging technologies.

* [W3C Privacy Interest Group](https://www.w3.org/Privacy/) - Leading the web to its full potential.



**[`^        back to top        ^`](#)**



## Publications

* [GDPR Today](https://www.gdprtoday.org/) - Privacy news from the Open Rights Group.

* [Spread Privacy](https://spreadprivacy.com/) - DuckDuckGo Blog.

* [Freedom To Tinker](https://freedom-to-tinker.com/) - Blog from Princeton's CITP, a research center that studies digital technologies in public life.

* [pdpEcho](https://pdpecho.com/) - All about personal data protection and privacy, by Gabriela Zanfir-Fortuna.

* [GDPRhub](https://gdprhub.eu/) - Free and open wiki that allows anyone to find and share GDPR insights across Europe.



**[`^        back to top        ^`](#)**

    

## Related

* [Privacy Respecting](https://github.com/nikitavoloboev/privacy-respecting)

* [Cybersecurity](https://github.com/paulveillard/cybersecurity)

* [Cybersecurity Architecture](https://github.com/paulveillard/cybersecurity-architecture)

* [Awesome: Privacy](https://github.com/pluja/awesome-privacy#readme) - List of free, open source and privacy respecting services and alternatives to privative services.

* [Developers Guide to HIPAA Compliance](https://github.com/truevault/hipaa-compliance-developers-guide)



**[`^        back to top        ^`](#)**



**[`^        back to top        ^`](#)**



## License

MIT License & [cc](https://creativecommons.org/licenses/by/4.0/) license



Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 International License.



To the extent possible under law, [Paul Veillard](https://github.com/paulveillard/) has waived all copyright and related or neighboring rights to this work.