Guides

Practical GDPR guides, each with its own template.

One concrete question per guide: what the law requires, a method to get it done and a spreadsheet to start from. Official sources only, reviewed whenever the law or the authorities change.

4complete guides

4free spreadsheet kits

All reviewed on 23 Oct 2026, with pending EU proposals flagged.

Start here

GDPR in practice Includes an Excel and ODS kit

Record of processing activities (ROPA): build yours in an afternoon (template included) Almost every organisation needs one, and almost nobody enjoys writing it. A simple method to finish a usable record by the end of the day, with worked examples and every rule linked to its source.

12 min readReviewed 23 Oct 2026GDPR Art. 30

Read the guide

All guides

GDPR in practice

Record of processing activities (ROPA): build yours in an afternoon (template included) A simple method to finish a usable record by the end of the day, with worked examples and every rule linked to its source.

12 min · Art. 30 Kit included

GDPR in practice

Data breach: what to do in the first 72 hours A calm, hour-by-hour plan with the decision logic of the CNPD (Portugal's data protection authority) and the EDPB, adapted real cases and the text you have to send.

12 min · Art. 33 and 34 Kit included

GDPR in practice

Subject access requests (DSARs) and erasure requests: answer within one month, without panic A process to repeat every time someone asks for their data or asks you to delete it. Deadlines counted to the day and seven reply templates.

13 min · Art. 12, 15 and 17 Kit included

DPO productivity

External DPO with several clients: how to manage GDPR for all of them without drowning Where your role stops, and how to organise clients, deadlines and evidence so Friday comes with everything up to date.

12 min · Art. 37 to 39 Kit included

Three topics, one goal: less time on GDPR.

We organise the guides around the questions that reach people who do this work every day.

GDPR in practice Concrete problems, solved step by step.

Record of processing activities Data breach: the first 72 hours Access and erasure requests

DPO productivity For people who look after several clients at once.

External DPO with many clients

Tools and automation Templates, comparisons and how to choose software.

In preparation

Free kits

Every guide comes with a ready-to-use spreadsheet.

See all resources

Record of Processing Starter Kit Controller and processor records, 12 rows already written and a checklist. XLSX · ODS Download the kit

Data Breach Response Kit Breach register, 72-hour plan, risk assessment, notification to the CNPD, notice to individuals and a card to pin up. XLSX · ODS Download the kit

Access and Erasure Request Log Dashboard, a log that works out the deadline, reply templates, where to look and a check before you send. XLSX · ODS Download the kit

Multi-client DPO Kit Clients by risk tier, capacity, yearly calendar, deadlines and an evidence log. XLSX · ODS Download the kit

Practical GDPR guides, each with its own template.

All guides

Three topics, one goal: less time on GDPR.

Every guide comes with a ready-to-use spreadsheet.

A tool to take GDPR off your plate.

You can choose what we store