Crosswalk
GDPR
Where the corpus maps to GDPR: General Data Protection Regulation.
Canonical citation
- Standard ID
- EU GDPR
- Current version
- Regulation 2016/679
- Publication date
- 2016-04
- Topic
- General Data Protection Regulation
- Upstream check location
- https://
eur-lex.europa.eu/ eli/ reg/ 2016/ 679/ oj (opens in a new tab) - Last verified (UTC)
- 2026-06-30
Mapped control areas, 10
Control areas from the reverse crosswalk
From the Reverse Framework Control Crosswalk Matrix, which answers: given a control identifier or family, which documents address it.
Coverage, 5 domains
Coverage by domain
From the Reverse Framework Control Crosswalk Matrix; the main crosswalk table's document counts land here.
Governance, 2 documents
- Data Retention Scheduleregister
- Records Retention and Destruction Standardstandard
Security, 4 documents
Supply chain, 3 documents
Privacy, 7 documents
- Privacy and Data Governance Policypolicy
- Data Subject Rights Management Procedureprocedure
- Privacy Management Programme Chartercharter
- Data Protection and Privacy Breach Response Procedureprocedure
- Privacy Impact and Cross-Border Transfer Procedureprocedure
- Cross-Border Data Flow Registerregister
- Privacy Jurisdiction Indexannex
Dev security, 1 document
Corpus citations, 49
Documents naming it in their framework alignment
Generated from each document's framework alignment list in the taxonomy, through the committed alias map.
- AI Compliance PolicyAI
- AI Human-Oversight StandardAI
- AI Model Documentation and Transparency FrameworkAI
- AI Vendor Security Questionnaire TemplateAI
- Automated Decision-Making and Profiling RegisterPrivacy
- AWS Cloud Hardening Baseline StandardDev security
- Azure Cloud Hardening Baseline StandardDev security
- Building Management Systems (BMS) Overlay AnnexOperations
- Children's Data FrameworkPrivacy
- Cloud Exit and Data Portability StandardSupply chain
- Consent Management FrameworkPrivacy
- Cookie and Tracker RegisterPrivacy
- Cross-Domain Incident Coordination ProcedureResilience
- Data Architecture StandardArchitecture
- Data Processing Agreement Template (GDPR Article 28)Privacy
- Data Protection and Privacy Breach Response ProcedurePrivacy
- Data Retention ScheduleGovernance
- Data Subject Access Request Workflow TemplatePrivacy
- Data Subject Rights Management ProcedurePrivacy
- Dataset Datasheet TemplateAI
- DPIA (Data Protection Impact Assessment) TemplatePrivacy
- eIDAS Sector Requirements AnnexCompliance
- Employee Monitoring Notice TemplatePrivacy
- Enterprise Governance and Risk Management PolicyRisk
- Enterprise Risk Management StandardRisk
- Fourth-Party and Nth-Party Risk ProcedureSupply chain
- Google Cloud Platform Hardening Baseline StandardDev security
- Insider Risk Programme FrameworkSecurity
- Integrated AI and Privacy Assessment ProcedureAI
- Joint Controller Arrangement TemplatePrivacy
- Legal and Regulatory Compliance PolicyCompliance
- Legitimate Interest Assessment (LIA) TemplatePrivacy
- Legitimate Interest Assessment for Employment Monitoring AnnexPrivacy
- Mobile Application Security StandardDev security
- Network Telemetry and DPI Controls StandardPrivacy
- Presence Inference Limitations StandardPrivacy
- Privacy by Design FrameworkPrivacy
- Privacy Impact and Cross-Border Transfer ProcedurePrivacy
- Privacy Management Programme CharterPrivacy
- Privacy Notice TemplatePrivacy
- Pseudonymization and Anonymization StandardPrivacy
- Record of Processing Activities TemplatePrivacy
- Supplier Offboarding Evidence TemplateSupply chain
- Supplier Security and Privacy Assurance StandardSupply chain
- Training Data Governance ProcedureAI
- Transfer Impact Assessment (TIA) TemplatePrivacy
- Whistleblower and Incident Reporting ProcedureGovernance
- Workforce Network Monitoring PolicySecurity
- Works Council and Employee Representative Consultation ProcedurePrivacy
Note
What this mapping is
From the GRC Library Compliance Alignment Matrix: citations are indicative, not exhaustive (the representative-citation convention), and no entry constitutes a certification, attestation, or legal opinion.
From the Reverse Framework Control Crosswalk Matrix: coverage is partial, and external control identifiers and clause numbers are referenced for navigation only; the library does not reproduce third-party control text.
From the Cross-Framework Alignment Matrix: the alignment is not an official mapping, certification claim, legal opinion, or reproduction of third-party framework content.
The standards, laws, frameworks, and programmes in the canonical citations register, mapped here or not, are listed with their current editions on the Standards & frameworks page, generated from that register.