Academy · Guides
Privacy & Data Protection
Privacy and data protection
- Guide
AI under Swiss Law and the GDPR: Key Differences
What the revised Swiss FADP and the GDPR mean for companies that build or use AI services: scope, legal bases, impact assessments, transfers, sanctions and the EU AI Act.
- Guide
Cookies and Consent
When a cookie banner is required, what valid consent looks like and how the ePrivacy rules and the GDPR work together.
- Guide
GDPR Breach Notification: the 72-Hour Rule
Article 33 GDPR: notify the authority within 72 hours of becoming aware of a personal data breach. When to notify, how hours count, when to tell people.
- Guide
GDPR Data Retention: How Long to Keep Personal Data
The GDPR sets no fixed retention period: Article 5(1)(e) allows no longer than necessary. How to set retention periods, handle backups and delete data.
- Guide
How to Answer a DSAR Within the GDPR Deadline
Answer a data subject access request within one month, extendable by two (Articles 12 and 15 GDPR): what to send, what you may refuse, how to keep time.
- Guide
International Data Transfers
How Chapter V GDPR works after Schrems II: adequacy decisions, the EU-US Data Privacy Framework, standard contractual clauses and the assessment that goes with them.
- Guide
Records of Processing Activities (RoPA)
What Article 30 GDPR requires you to record, who must keep a register, and how to keep it useful.
- Guide
Website Technology Audits and the GDPR
What a website technology audit examines, why privacy notices and actual data flows drift apart, and which legal duties it checks.
Let’s talk
Tell us what you’re working on. We’ll get the right person on it and reply within one business day. The first chat is free.