Regulation and framework: GDPR and national data protection acts

35 pages. Search every page with Ctrl K, or open the menu.

Products 4 pages

KYE™ DSAR Evidence Pack™KYE™ DSAR Evidence Pack™ — signed bundle of every audit-chain entry involving a named data subject. GDPR Art. 15 / UK DPA Pt 3 Ch 3 / CCPA
Your model is on Hugging Face. Its authority isn't.Hugging Face answers what a model can do. KYE Protocol™ answers whether you may USE it here — under EU AI Act, GDPR, DORA — and prove it. KYE™ binds a model or…
Your dataset is on Kaggle. Its authority isn't.Kaggle answers what a dataset or model can do. KYE Protocol™ answers whether you may USE it here — under EU AI Act, GDPR, DORA — and prove it. KYE™ binds a…
KYE™ Hiring Governance Pack™KYE™ Hiring Governance Pack™ governs AI agents across the hiring lifecycle — sourcing, CV/resume screening, ranking, scheduling, assessment, offer, onboarding.…

By sector 6 pages

KYE™ Claims Authority Pack™The Claims Authority Pack™ — a KYE™ Sector Pack Foundry™ expert-pack delivering Agentic Governance™ with Authority Finality™ for insurance claims. Maps every…
KYE™ Clinical AI Governance Pack™The Clinical AI Governance Pack™ — a KYE™ Sector Pack Foundry™ expert-pack delivering the EU/UK governance and market-entry layer for AI clinical decision…
KYE™ Digital Pathology Authority Pack™The Digital Pathology Authority Pack™ — a KYE™ Sector Pack Foundry™ expert-pack delivering Agentic Governance™ with Authority Finality™ for digital and…
KYE™ Genomics-Biosecurity Authority Pack™The Genomics-Biosecurity Authority Pack™ — a KYE™ Sector Pack Foundry™ expert-pack governing AI-generated and AI-assisted genomic sequences at the action…
Legal sectorThe evidence layer that makes legal accountability for AI agents possible. Subpoena response in 48h. Agent-as-contracting-party contracts enforceable. UNCITRAL…
KYE™ Medical Imaging Authority Pack™The Medical Imaging Authority Pack™ — a KYE™ Sector Pack Foundry™ expert-pack delivering Agentic Governance™ with Authority Finality™ for radiology and medical…

Compliance, conformance & certification 18 pages

GDPRGDPR — General Data Protection Regulation coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
NIST 800-53 Rev 5 hub (universal control taxonomy)NIST 800-53 Rev 5 is the universal control taxonomy KYE Protocol™ uses as the hub for every regulatory crosswalk. 20 control families, 25 headline controls…
Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Info Act, GDPR-aligned)Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Info Act, GDPR-aligned) coverage by KYE Protocol™ — every requirement…
BDSGBDSG — Bundesdatenschutzgesetz (Federal Data Protection Act, 2018) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
Data Protection Act 2018Data Protection Act 2018 coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Digital Personal Data Protection Act, 2023Digital Personal Data Protection Act, 2023 coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
DPO stakeholder reportRepresentative report envelope for a Data Protection Officer. Synthetic tenant — GDPR Art 30 RoPA & DSAR coverage. Signed HTML; anyone with the public key can…
GDPR (Whistleblowing)GDPR (Whistleblowing) — Special-Category & Data-Minimisation in Reports coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact…
GDPR Article 22GDPR Article 22 — Automated Decision-Making coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Law 4624/2019 (measures implementing the GDPR)Law 4624/2019 (measures implementing the GDPR) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Law No. 190/2018 (implementing measures for the GDPR)Law No. 190/2018 (implementing measures for the GDPR) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Lei n.º 58/2019 (assegura a execução do RGPD)Lei n.º 58/2019 (assegura a execução do RGPD) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Loi du 30 juillet 2018Loi du 30 juillet 2018 — Belgian Data Protection Act coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Personal Data Protection Act (amended 2019 to implement the GDPR)Personal Data Protection Act (amended 2019 to implement the GDPR) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
Personopplysningsloven (LOV-2018-06-15-38)Personopplysningsloven (LOV-2018-06-15-38) — GDPR incorporated via the EEA Agreement coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™…
Tietosuojalaki (1050/2018)Tietosuojalaki (1050/2018) — Data Protection Act coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
UAVGUAVG — Uitvoeringswet Algemene verordening gegevensbescherming (GDPR Implementation Act, 2018) coverage by KYE Protocol™ — every requirement bijection-mapped…
Ustawa z dnia 10 maja 2018 r. o ochronie danych osobowych (Personal Data Protection Act)Ustawa z dnia 10 maja 2018 r. o ochronie danych osobowych (Personal Data Protection Act) coverage by KYE Protocol™ — every requirement bijection-mapped to the…

Solutions 2 pages

For DPOsKYE Protocol™ gives DPOs a DSAR Evidence Pack™ derived from the signed chain — GDPR Article 15/30/35 evidence, replay-proof against the data_use PDP stage.
KYE Protocol™ for the EURuntime authority and signed evidence for AI in the European Union — bijection-mapped to the EU AI Act, GDPR, DORA, NIS2 and EDPB guidance. Sovereign-cloud…

Resources 5 pages

Data Processing Addendum (v1.0)KYE Protocol™ Data Processing Addendum, GDPR Article 28 compliant. SCCs incorporated, sub-processor list, security measures, data-subject rights…
Privacy Policy (v1.0)KYE Protocol™ Privacy Policy. Data controller: KYE Protocol Ltd. Data we collect, lawful basis, retention, sub-processors, data subject rights under GDPR…
GDPR Art 30GDPR Art 30 — Record of Processing Activities (RoPA): — Record of Processing Activities (RoPA)
GDPR Art 35GDPR Art 35 — DPIA: — DPIA
GDPR Art 44-49GDPR Art 44-49 — Cross-border transfers: — Cross-border transfers