What is GDPR and Why It Matters?
A practitioner’s orientation to the General Data Protection Regulation — its legal basis, the shift from the 1995 Directive, why enforcement is a genuine financial risk, and why GDPR compliance has become a commercial prerequisite for organisations serving European markets.
Explore Resource
Key Definitions and Core Concepts
A precise reference for the defined terms in Article 4 — personal data, processing, controller, processor, pseudonymisation, consent, and the distinctions that determine whether GDPR applies and who bears which obligations.
Explore Resource
Territorial Scope — Who Must Comply
How GDPR’s extraterritorial reach applies to organisations established outside the EU — including Indonesian companies that offer services to EU residents or monitor their behaviour — and what that means for compliance obligations.
Explore Resource
The Six Lawful Bases for Processing
A decision framework for selecting the right lawful basis under Article 6 — consent, contract, legal obligation, vital interests, public task, and legitimate interests — with the consequences of each choice for data subject rights and organisational obligations.
Explore Resource
Rights of Data Subjects
The nine rights that GDPR grants to individuals — access, rectification, erasure, restriction, portability, objection, and rights relating to automated decision-making — with response timelines, exemptions, and what each right requires operationally.
Explore Resource
Roles: Controller, Processor, and Joint Controller
How GDPR allocates responsibility between data controllers, data processors, and joint controllers — the legal definitions, the obligations that follow from each role, and the contractual requirements under Article 28.
Explore Resource