Awesome GDPR

Description
Awesome GDPR is a curated, community-maintained list of resources about the EU General Data Protection Regulation (GDPR). It aggregates legal references, guidelines, technical and organizational best practices, and tools to help understand and implement GDPR requirements around data protection and privacy.

Category: Themed directories
Slug: awesome-gdpr
Source: https://github.com/bakke92/awesome-gdpr
Brand: bakke92-on-github

Features

1. Legal and Regulatory References

• Links to the official GDPR legal text (Regulation (EU) 2016/679).
• References to related EU legal documents and recitals.
• Material focused on interpretation of key GDPR articles.

2. Guidelines and Implementation Advice

• Curated guidelines from regulators and expert bodies on applying GDPR.
• Practical implementation advice for organizations of different sizes.
• Explanations of core GDPR concepts such as controller, processor, lawful basis, and consent (via linked resources).

3. Rights of the Data Subject (Articles 12–23)

• Resources explaining data subject rights: access, rectification, erasure, restriction, portability, objection, and rights related to automated decision-making.
• Guides on how organizations can operationalize and respond to data subject requests.

4. Privacy by Design & Developer Guidance (Article 25)

• Developer-focused guides on embedding privacy by design and by default into systems.
• Best practices for data minimization, pseudonymization, and secure architecture.
• Coding and design checklists for GDPR-aware application development.

5. Records of Processing Activities (Article 30)

• Resources on documenting processing activities.
• Templates and examples for records of processing (where provided by linked materials).

6. Security of Processing (Article 32)

• Guidance on appropriate technical and organizational security measures.
• Security best practices and frameworks aligned with GDPR requirements.

7. Incident Management & Breach Notification (Articles 33–34)

• Guides for handling personal data breaches.
• References for assessing risk, documenting incidents, and notifying authorities and data subjects.

8. Data Protection Impact Assessments (DPIA, Article 35)

• Methodologies and templates for conducting DPIAs.
• Criteria for when a DPIA is required and how to document outcomes (via linked resources).

9. Tools

• Collection of software and utilities that assist with:
  • GDPR compliance management.
  • Data mapping and record-keeping.
  • Consent and preference management.
  • Security and privacy testing.

10. Data Protection Authorities (Articles 51–59)

• Links to national and EU data protection authorities.
• Access to official guidance, decisions, and FAQs from regulators.

11. Organisations and Projects

• References to privacy and data protection organizations, NGOs, and initiatives.
• Open projects and communities working on GDPR and privacy tooling or guidance.

12. Publications and Learning Material

• Articles, whitepapers, and reports related to GDPR and data protection.
• Educational content for legal, compliance, and technical audiences.

13. Solutions

• Links to various GDPR-related solutions and platforms (e.g., compliance tools, privacy frameworks), curated for further exploration.

Pricing

Not applicable. Awesome GDPR is an open, curated list of resources hosted on GitHub and does not list pricing plans.