ComplianceSME

GDPR · Free for every business

GDPR compliance is free at ComplianceSME,
for every business, EU and UK.

The GDPR system is released free to unburden the compliance staff you already have, as the EU AI compliance load arrives on top of NIS2 and AI risk work. The AI Act applies from 2 August, and trained staff are not available to hire in the numbers the market now needs.

Every system carries a training module that holds the regulation itself, so the member of staff who runs it learns the law first. One person reads the module, states what the GDPR requires and whether it binds your business, then runs the system and produces the documentation with the article citations. The EU GDPR and the UK GDPR each have their own system below.

How to get the free system

Find your situation

GDPR (EU), Regulation (EU) 2016/679

The EU General Data Protection Regulation binds any business that processes the personal data of people in the European Union. Download the starter pack first, then the section that matches your compliance area, one at a time.

GDPR (EU) · Section

Consent management

Get this section free →
GDPR (EU) · Section

Transparency and information provision

Get this section free →
GDPR (EU) · Section

Data subject rights

Get this section free →
GDPR (EU) · Section

Processor relationships and contracts

Get this section free →
GDPR (EU) · Section

Joint controllers and representatives

Get this section free →
GDPR (EU) · Section

Data protection by design, default and security

Get this section free →
GDPR (EU) · Section

Records of processing and supervisory cooperation

Get this section free →
GDPR (EU) · Section

Breach notification and impact assessment

Get this section free →
GDPR (EU) · Section

Data protection officer and international transfers

Get this section free →

UK GDPR and DPA 2018

The UK GDPR and the Data Protection Act 2018 bind any business that processes the personal data of people in the United Kingdom. Download the starter pack first, then the section that matches your compliance area, one at a time.

UK GDPR · Section

Data subject rights and complaints

Get this section free →
UK GDPR · Section

Security and national security processing

Get this section free →
UK GDPR · Section

Health and education data exemptions

Get this section free →
UK GDPR · Section

Law enforcement principles and lawful basis

Get this section free →
UK GDPR · Section

Law enforcement data subject rights

Get this section free →
UK GDPR · Section

Law enforcement technical measures and breach notification

Get this section free →
UK GDPR · Section

Law enforcement automated decisions and international transfers

Get this section free →
UK GDPR · Section

Intelligence services processing

Get this section free →

The free system

Free · EU GDPR and UK GDPR

The GDPR system is free to download. The download needs a free ComplianceSME account, so the files land in your library and so update files can reach you when the law changes. Opening the account includes accepting the free licence terms.

The system is delivered section by section. Your first download is the starter pack: the printed guide, the training module, the reference file, and File 1, which builds your Entity Passport. After that you download one section at a time, when you reach the compliance area it covers.

The system runs inside your own Claude account and requires the Claude Max plan (approximately £90 per month, paid directly to Anthropic) to operate. You upload the files, type START, and the system interviews you one question at a time, then produces your documentation with the article citations.

Membership keeps the system current. When the GDPR or the UK data protection regime changes, an update file arrives in your account, so you never work from a stale version.

Open a free account

The GDPR is one instrument. Every other regulation that binds your business has its own system in the full register. See all systems in the register →