Our guidance

25 May 2018 marked the day when the General Data Protection Regulation 2016/679 (GDPR) became applicable to any business that processes personal data of EU citizens.

It has been reported that awareness about GDPR obligations increased but many questions concerning implementation of its provisions require further guidance. To this end, we have prepared:

The GDPR made simple(r) for SMEs

This user-friendly Handbook offers guidance and practical suggestions for Small and Medium-sized enterprises (SMEs) that could facilitate compliance with the General Data Protection Regulation (GDPR).

Read publication

Guidance for Data Protection Authorities (DPAs) on running a hotline dedicated to Small and Medium-sized enterprises (SMEs)

The guidance builds on the experience that NAIH gained during the timespan of a hotline. NAIH ran an email hotline service dedicated to SMEs during the period of March 2019 and March 2020.

Read publication

Who we are

The consortium brings together an extensive research experience and knowledge in the field of data protection and its governance that builds on the legacy of previous collaborative projects.

Achievements

SupporT small And medium enterprises on the data protection Reform II (STAR II) ran 2018-2020. During this period the STAR II project:

Card image cap

Reviewed the state of the art in DPA awareness-raising activities (Deliverable D2.1 DPAs’ efforts to raise awareness among SMEs)

Card image cap

Analysed SMEs’ experience within first months of the functioning of the GDPR (D2.2 SMEs’ experience with the GDPR)

Card image cap

Ran an awareness raising campaign for SMEs about the hotline run by NAIH (D3.1 Report on the awareness-raising campaign)

Card image cap

Ran a hotline (12 months) to respond to SMEs’ email queries; based on these queries prepared a list of the most frequently asked questions (D3.2 Report on the hotline & D3.3 Report on the statistics and efficiency of the hotline)

Card image cap

Prepared a digital guidance for DPAs on good practices in running an e-mail hotline and raising SME awareness (D4.3.A Finalised guidance for DPAs), and

Card image cap

Prepared an innovative, FAQ-based handbook (digital and printed) for SMEs on EU personal data protection law (D4.3.B Handbook for SMEs + a Hungarian version)

Our blog posts

SupporT small And medium enterprises on the data protection Reform II — STAR II 2019-2020

Helping SMEs better cope with the GDPR

Helping SMEs better cope with the GDPR

Oct 19, 2020 BLOG
As part of the STAR II project, TRI has been working on better understanding how small and medium enterprises...
Welcoming feedback on Guidance for DPAs on good practices to run hotlines for SMEs and the Handbook on European data protection law for SMEs

Welcoming feedback on Guidance for DPAs on good practices to run hotlines for SMEs and the Handbook on European data protection law for SMEs

Aug 23, 2020 BLOG
The main purpose of this workshop is to receive feedback on the two documents. Our event will be highly interactive, and we will provide participants and speakers with the opportunity to exchange and to voice their thoughts on the Guidance and the Handbook.
What are the challenges that SMEs are facing in complying with the GDPR? A view from the field

What are the challenges that SMEs are facing in complying with the GDPR? A view from the field

Jan 07, 2020 BLOG
Since the GDPR came into force in May 2018, organisations of all sizes have been grappling with...