Yes, AlterRisk includes a dedicated GDPR module designed to help organizations comply with the General Data Protection Regulation (GDPR). This module is accessible to users with the DPO (Data Protection Officer) role and supports key GDPR requirements, including:

  • Maintaining records of personal data processing activities (Article 30),

  • Managing data subject consents (Articles 6–8),

  • Handling data subject requests in line with their rights (Articles 12–22),

  • Recording personal data breaches (Articles 32–34),

  • Conducting Data Protection Impact Assessments (DPIA) (Article 35).

The module allows for detailed tracking of processing activities, including legal basis, data categories, retention periods, access rights, international transfers, and security measures. It provides structured data entry, search, and filtering capabilities to simplify ongoing compliance.