All resources

Cybersecurity and Infrastructure Security Agency (CISA)

The CISA is a DHS agency responsible for cybersecurity and infrastructure protection, coordinating with state governments and defending against cyber threats.

The Center for Threat-Informed Defense

The Center is a non-profit, privately funded research and development organization operated by MITRE. The Center’s mission is to advance the state of the art and the state of the practice in threat-informed defense globally.

"The Data Diva" Talks Privacy Podcast

Debbie Reynolds of "The Data Diva" Talks Podcast provides wide-ranging discussion topics with worldwide leaders about data privacy that impacts businesses. This podcast explores data and emerging technologies, international laws and regulations, data ethics, individual privacy rights, and future trends

Access Now

Access Now defends and extends the digital rights of users at risk around the world

Accountability framework self-assessment

The accountability self-assessment will help you to assess the extent to which your organisation is currently meeting the ICO’s expectations in relation to accountability

Adnovum

The Swiss software company Adnovum offers its clients comprehensive support in the fast and secure digitalization of business processes from consulting and conception to implementation and operation.

Advisera

Advisera makes standards and regulations easy to understand and simple to implement.

Digital Operational Resilience Act (DORA) - Regulation (EU) 2022/2554: Training, Updates, Compliance

Website about DORA

AEPD

Spanish Data Protection Agency (Agencia Espanola Proteccion Datos)

Aldefi

Aldefi is the ultimate defender of your enterprise's sensitive data.

Ann Cavoukian, Ph.D

https://en.wikipedia.org/wiki/Ann_Cavoukian

APDCAT

Catalan Data Protection Authority (Autoritat Catalana de Protecció de Dades)

Article 29 Working Party

Independent European working party that dealt with issues relating to the protection of privacy and personal data until 25 May 2018 (entry into application of the GDPR)

AWS

Amazon Web Services

Baker McKenzie LLP

Global law firm

Bird & Bird

Bird & Bird is an international law firm with a focus on helping organisations being changed by technology and the digital world

Breugel

Bruegel is the European think tank specializing in economics

Bryan Cave Leighton Paisner

Bryan Cave Leighton Paisner LLP is a fully integrated global law firm that provides clients with connected legal advice, wherever and whenever they need it.

byDesign Guidance Documentation

CEDPO

Confederation of European Data Protection Organisations

Center for Internet Security (CIS)

Makes the connected world a safer place for people, businesses, and governments through our core competencies of collaboration and innovation.

Centre for Data Ethics and Innovation (CDEI)

The CDEI is a government expert body enabling the trustworthy use of data and AI

Certification Questions

Sample questions for CIPP/E exam

Cisco

CNIL

Commission nationale de l'informatique et des libertés - French Data Protection Authority

Compliance Detective

We create compliance games and creative training solutions to empower your employees in navigating emerging challenges in responsible AI and data protection

Conference of the Independent Data Protection Supervisory Authorities of the Federationandthe Länder

Congressional Research Service

The Congressional Research Service (CRS) provides comprehensive research and analysis on all legislative and oversight issues of interest to the United States Congress

ConPolicy

Council of Europe

Council of the European Union (the Council)

Coursera

Coursera partners with more than 275 leading universities and companies to bring flexible, affordable, job-relevant online learning to individuals and organizations worldwide

Cover your tracks

Test your browser to see how well you are protected from tracking and fingerprinting

Croatian Personal Data Protection Agency

Croatian Data Protection Authority

Cyber RIsk GmbH

d.pia.lab

The Brussels Laboratory for Data Protection & Privacy Impact Assessments, or d.pia.lab, connects basic, methodological and applied research, provides training and delivers policy advice related to impact assessments in the areas of innovation and technology development.

Daniel J. Solove

An internationally-known expert in privacy law

Data and Marketing Association

Data Privacy Manager

A cloud software platform for privacy management and automation designed to improve the governance of personal data, centralize consents and preferences, automate compliance-related tasks, and minimize regulatory risks

Data Privacy Office

Data Privacy Scorebox

Data processing Records and Risk Assessment

This tool enables the management of an entity's processing operations in the following aspects: management of the RoPA, generation of the Inventory of Processing Operations and the minimum bases for initiating risk analysis and management activities within the scope of the GDPR, generation of reports and management and local storage of data

Data Protection Commission Ireland

The DPC is the Irish supervisory authority for the General Data Protection Regulation (GDPR)

Data protection laws of the world

Comparison of the requirements of different Data Protection laws

Data Protection Network

A small experienced team of data protection consultants who pride ourselves on taking a no-nonsense approach to data protection and privacy

Data Protection Notice Generator

Free-to-use tool for generating basic data protection template notices to inform an organisation’s stakeholders, such as customers, employees, job applicants, donors, service users and volunteers, on how it manages their personal data

Data Protection Tool

DataEthics

DataEthics is a politically independent ThinkDoTank based in Denmark with a European (and global) outreach.

Dataprotection Landscape

Datatilsynet (Denmark)

The Danish Data Protection Agency

Datatilsynet (Norway)

Norwegian Data Protection Authority

Datenschutz Self Assessment Tool

Deceptive Patterns

https://www.deceptive.design/about-us

Deloitte

Deloitte provides industry-leading audit and assurance, tax and legal, consulting, financial advisory, and risk advisory services to nearly 90% of the Fortune Global 500® and thousands of private companies

Digital Operational Resilience Act (DORA)

Website about DORA

DLA Piper

One of the ten largest law firms in the world

Dmitrii Filatov

Doteveryone

DPO Challenge Game

DPO simulator game

DPOrganizer

Privacy management software - a powerful Software-as-a-Service - with a focus on ease-of-use, simplicity and flexibility

DSCI

Data Security Council of India

e-Learning Programme on the PDPA

EDPB

European Data Protection Board. Independent European body whose purpose is to ensure consistent application of the GDPR and to promote cooperation among the EU’s data protection authorities. On 25 May 2018, the EDPB replaced the

@Article 29 Working Party

⁠

EDPS

The European Data Protection Supervisor (EDPS) is an independent supervisory authority whose primary objective is to monitor and ensure that European institutions and bodies respect the right to privacy and data protection when they process personal data and develop new policies.

EDPS Inspection Software

The European Data Protection Supervisor (EDPS) has developed open source software tools for the automation of privacy and personal data protection inspections of websites.

EIOPA

EIT Digital

European education and innovation organisation with a mission to foster digital technology innovation and entrepreneurial talent for economic growth and quality of life

Electronic Frontier Foundation

ENISA

European Union Agency for Network and Information Security

ESRB

European Commission (the Commission)

European Parliament

Legislative and representative body of the European Union (EU) directly elected by the citizens of EU member states

Exiger

FDPIC

Federal Data Protection and Information Commissioner

Federal office for Information security

The BSI as the Federal Cyber Security Authority shapes information security in digitization through prevention, detection and reaction to government, business and society

Federal Reserve Bank of San Francisco

Federal Trade Commission (FTC)

Future of Privacy Forum

FPF Education and Innovation Foundation are non-profit organizations that serve as catalysts for privacy leadership and scholarship, advancing principled data practices in support of emerging technologies

Garante per la protezione dei dati personali

The Italian Data Protection Authority

Gartner

A research and consulting company specializing in information technology markets

GDPR Risk Assessment

Analysis of the level of risk and of the obligation of a Data Protection Impact Assessment

GDPR Text

GDPR-TEXT.COM is an interactive GDPR handbook with the text of the Regulation in 17 languages (official texts and translations), as well as article-by-article commentary, explanations from supervisory authorities and important cases

GDPR today: the GDPRhub newsletter

Get the most recent and juiciest data protection and privacy news and latest court and DPA decisions from across Europe in GDPR today

GDPRtoons

Collection of informative and thought-inspiring cartoons focused on the pending General Data Protection Regulation (GDPR)

Gierschmann

Over 20 years of experience in legal and management consultancy for global market players enables us to combine high quality standards with extensive knowledge about best practices

Global Data Privacy & Security Handbook

Global Legal Group

GLG is an independent, London-based media company specialising in the legal and strategic business sectors

Google

GreenbergTraurig

hoggo

hoggo is a Privacy Risk Management Platform (PRIME)

IAB Europe

IAB Europe (Interactive Advertising Bureau) is the European-level association for the digital marketing and advertising ecosystem

IAPP

The International Association of Privacy Professionals

ICLG.com

The International Comparative Legal Guides and the International Business Reports are published by: Global Legal Group

ICO

The Information Commissioner's Office

Implement Privacy

Privacy & AI training programs

Infocomm Media Development Authority (IMDA)

The IMDA develops and regulates the converging infocomm and media sectors in a holistic way, creating a dynamic and exciting sector filled with opportunities for growth, through an emphasis on talent, research, innovation and enterprise.

Information and Privacy Commissioner of Ontario

Infosec

Infosec Train

Ipsos

ISACA

Information Systems Audit and Control Association

Jaap-Henk Hoepman

Jamal Ahmed

Jamal Ahmed, the "King of Data Protection" as dubbed by the BBC, isn't just the reigning global expert on data privacy - he's a passionate advocate for privacy rights.

Journal of Privacy and Confidentiality

an open-access multi-disciplinary journal whose purpose is to facilitate the coalescence of research methodologies and activities in the areas of privacy, confidentiality, and disclosure limitation. The JPC seeks to publish a wide range of research

Just Delete Me

JustDeleteMe aims to be a directory of urls to enable you to easily delete your account from web services

Just Get My Data

JustGetMyData aims to be a directory of urls to enable you to easily obtain your data from web services

Just Whats The Data

JustWhatsTheData makes it easy for the user to know the amount and type of information that web services collect when using them

Karlstads universitet

Katharine Jarmul

Privacy & Security in Machine Learning and Data Science, Author of Practical Data Privacy

KPMG

KU Leuven

Latham & Watkins

Latham & Watkins is a global law firm with more than 3,000 lawyers in its offices located in Asia, Europe, the Middle East and the United States

Lawrence Harvey

LearnQuest

The preferred training partner to the world’s leading companies, organizations, and government agencies

LinkedIn Learning

Luiza’s Podcast

In this podcast, Luiza Jarovsky discusses emerging privacy, tech & AI topics with global experts. If you enjoy Luiza's Podcast, you will also like Luiza's Newsletter, subscribe: www.luizasnewsletter.com

Make a subject access request

Use this service to ask for your personal information from an organisation

Map of GDPR Adequate Countries

This is the interactive map of GDPR Adequate Countries that shows countries which the European Commission has recognised as providing an adequate level of data protection.

Mastercard

Mastercard is a global technology company in the payments industry

Meru Data

Meru Data is building solutions to embed privacy into core business operations. We help simplify Information Governance

Mitratech

MITRE

National Cyber Security Centre (NCSC)

Helping to make the UK the safest place to live and work online

National Institute of Standards and Technology (NIST)

Physical sciences laboratory and a non-regulatory agency of the United States Department of Commerce

Nishant Bhajaria

Author of "Data Privacy: A Runbook for Engineers". Data governance, security and privacy executive

Northeastern University

A global research university with a distinctive, experience-driven approach to education and discovery. The university is a leader in experiential learning, powered by the world’s most far-reaching cooperative education program

NoTies Consulting

For SaaS processors wasting time and losing deals on vendor GDPR due diligence 🧐

NOYB

noyb is a non-profit organization aiming to close the gap between privacy laws and the reality of corporate practice

OECD

Organisation for Economic Co-operation and Development

Office of the Australian Information Commissioner (OAIC)

We are an independent agency within the Attorney-General’s portfolio. Our primary functions are privacy, freedom of information and government information policy. Our responsibilities include conducting investigations, reviewing decisions, handling complaints, and providing guidance and advice.

Office of the Commissioner for Personal Data Protection

Cyprus Data Protection Authority

Office of the Data Protection Ombudsman

Finnish data protection authority

Office of the Privacy Commissioner of Canada (OPC)

The Privacy Commissioner of Canada is an Agent of Parliament whose mission is to protect and promote privacy rights

Office of the Privacy Commissioner, New Zealand

OneTrust

https://www.onetrust.com/company/about-us/

Osano

Osano is the intuitive data privacy platform for simplifying privacy compliance.

OWASP

The Open Worldwide Application Security Project

PCPD

Office of the Privacy Commissioner for Personal Data (PCPD)

PDPA assessment tool for organisations (PATO)

Assessing the implementation of PDPA requirements

PDPC

Personal Data Protection Commission of Singapore

PDPC e-Learning Assessment

Assessment of knowledge in privacy in Singapore

PECB

PECB is a certification body that provides education, certification, and certificate programs for individuals on a wide range of disciplines.

PIA software

The open source PIA software helps to carry out data protection impact assessment

Pivacy Quest

The Playground of Privacy Professionals. Invest 10 minutes a day to level up your technical privacy and security skills!

Plot4AI

Privacy Library Of Threats 4 Artificial Intelligence. A threat modeling library to help you build responsible AI.

Plum Consulting

An independent consulting firm, focused on the telecommunications, media, technology, and adjacent sectors

Privacy 101. Back to basics

Privacy Advisor Podcast

Interviews with the privacy world's most interesting voices by Editorial Director Jedidiah Bracy

Privacy Analytics

Privacy Analytics, an IQVIA company, enables organizations to unlock the value of sensitive data for secondary purposes without compromising personal information

Privacy Company

Privacy Enhancing Technologies Adoption Guide

This is an interactive site we have built in order to help organisations consider how the adoption of PETs could unlock opportunities for data-driven innovation, whilst protecting the privacy and confidentiality of sensitive data

Privacy HUB

News, analysis, and training materials on GDPR, CCPA, and Data Privacy.

Privacy Icons

Icons as privacy notices for everyone

Privacy patterns

Privacy patterns are design solutions to common privacy problems — a way to translate "privacy-by-design" into practical advice for software engineering

Privacy Please

A genuine and informative podcast about data privacy and security. Your reliable place for best practices, interviews, belly laughs, and real stories

Privacy Pros Podcast

Discover the Secrets from the World's Leading Privacy Professionals for a Successful Career in Data Protection

Privacy Tech Talk

We talk about the different privacy technologies out on the market - what they do and how they do it

Privacy Wiki

Privado

Privado syncs privacy compliance with software development by providing full visibility and continuous governance for how personal data is processed

Privasee

Privacy automation tool with free rate

Private AI

Private AI’s mission is to build the privacy layer for software

Project ARC II - GDPR Awareness Raising Campaign For SMEs

PWC

Responsum

Restore Privacy

RestorePrivacy is a digital privacy advocacy group committed to helping people stay safe and secure online

SAP

Scrut Automation

Enhance your Information Security posture to close more enterprise deals

Secure Controls Framework

Securiti

At Securiti, our mission is to enable organizations to safely harness the incredible power of Data & AI

SecurityMetrics

We secure peace of mind for organizations that handle sensitive data by holding our tools, training, and support to a higher, more thorough standard of performance and service so you never have a false sense of security.

Simply Explained

Taking complicated topics and explaining them in plain English

Spirion

Company that develops an enterprise data management software intended to help businesses reduce their sensitive data footprint.

Stiftung Datenschutz

SuperOffice

SuperOffice makes CRM software for sales, marketing and customer service

Swedish Authority for Privacy Protection (IMY)

T4DATA

Teach Privacy

TechTarget

TeleTrusT

TeleTrusT embodies the largest competence network for IT security in Germany and Europe

TELUS

Terms and Conditions game

A mini-game about pop ups, and the deviousness of websites and apps

The Alan Turing Institute

The Alan Turing Institute is the national institute for data science and artificial intelligence, with headquarters at the British Library

The Data Challenge Game

The Danish DPA has launched a game about data protection that is aimed at children aged 10-12

The DPO centre

The Office of the Data Protection Authority (ODPA)

The Office of the Data Protection Authority is the independent regulatory authority for the purposes of the Data Protection (Bailiwick of Guernsey) Law, 2017 and associated legislation

The Security Company

The Security Company is a leading provider of creative employee security awareness programmes

The Shifting Privacy Left Podcast

Shifting Privacy Left features lively discussions on the need for organizations to embed privacy by design into engineering, devops and the product development processes BEFORE code or products are ever shipped.

Traficom

The Finnish Transport and Communications Agency

Tsaaro

Twitter Data Dash

Level up your privacy game

United Nations Big Data

University of Pennsylvania

A private university, located in Philadelphia, Pennsylvania, United States. A member of the Ivy League, Penn is the fourth-oldest institution of higher education in the United States, and considers itself to be the first university in the United States with both undergraduate and graduate studies.

UpGuard

UpGuard combines third-party security ratings, vendor questionnaires, and threat intelligence capabilities for a complete cyber risk solution

Uplevel

Usercentrics

The #1 Consent Management Platform for GDPR, CCPA, LGPD and POPIA compliance for websites and apps

Verizon

Regardless of the size of your business, agency or organization, you’re always on the lookout for the right partners. Our industry insight, information, products and solutions help improve your outcomes, so you can grow and thrive.

Vischer

An influential, innovative Swiss law firm, dedicated to providing effective legal solutions to business, tax and regulatory matters.

VISTA InfoSec

VISTA InfoSec is a vendor-neutral company providing Risk Compliance and Information Security Advisory Services to organizations for the past 16 years (established in 2004)

Wide Angle Analytics

Wide Angle Analytics makes it possible to respectfully track your visitors

World Economic Forum

The World Economic Forum is the International Organization for Public-Private Cooperation. The Forum engages the foremost political, business, cultural and other leaders of society to shape global, regional and industry agendas.

European Banking Authority

Adobe

ESMA

ISO

European Central Bank

UK Ministry of Justice

BSI

FAIR institute

Use filters or search field below to find what you need