Every rule you answer to, mapped to one workspace.
What each law asks of a small company, duty by duty, and the screen in Privacyboard that handles it. With what we do not cover, said plainly.
- General Data Protection Regulation
GDPR
Records, notices, requests, breaches, DPIAs.
See what it asks - ePrivacy Directive, Article 5(3)
Cookie laws (ePrivacy)
Consent before trackers, proof of every choice.
See what it asks - Regulation (EU) 2024/1689
EU AI Act
Classify each use of AI, record AI literacy.
See what it asks - CCPA/CPRA and other state laws
US state privacy laws
CCPA notice, 45-day requests, Do Not Sell, GPC.
See what it asks - GDPR Chapter V, SCCs and the DPF
International data transfers
Adequacy, SCCs, the DPF, transfer assessments.
See what it asks
Country laws
Pick the countries you serve: their notice, rights and deadline are added for you.
Brazil (LGPD)
Notice, 15-day access replies, encarregado, consent banner.
Québec (Law 25)
Person in charge, 30-day replies, tracking you opt into.
UK GDPR
UK authority, UK representative, one-month replies.
Switzerland (FADP)
Swiss notice, 30-day replies, FDPIC, Swiss representative.
Saudi Arabia (PDPL)
Saudi notice, 30-day replies, 72-hour breach reports.
Also covered in your policy and request form:
- Canada (PIPEDA)
- Chile (Law 21.719)
- Australia (Privacy Act)
- China (PIPL)
- Japan (APPI)
- South Korea (PIPA)
- Singapore (PDPA)
- India (DPDP Act)
- South Africa (POPIA)
- Türkiye (KVKK)
- Israel (Privacy Protection Law)
- United Arab Emirates (PDPL)
- Thailand (PDPA)
- New Zealand (Privacy Act 2020)
One workspace, every rule in it.
Start with your website address. In about 5 minutes your first documents are ready, with no password to create.
Start free