LABLOGIC KNOWLEDGE BASE
Practical knowledge on GDPR, NIS2, and cybersecurity
Resources for boards and teams responsible for data protection and security. I explain obligations, structure risk, and show how to translate GDPR, NIS2, and KSC requirements into organizational decisions and actions.
SEARCH KNOWLEDGE BASE
Find the right topic
AREAS OF KNOWLEDGE
Select an area
Categories correspond to LabLogic’s main service areas.
01
DPO and GDPR
DPO function, audits, accountability, risk, and compliance of practice with documentation.
02
NIS2 and local law KSC
Qualification, board responsibility, gap analysis, implementation, and audit readiness.
03
Incidents and Breaches
Incident assessment, risk, reporting decisions, communication, and corrective actions.
04
Training and Workshops
Programs for boards, management, employees, and IT and compliance teams.
STARTING POINT
Where do you want to start?
Choose the situation closest to your organization’s problem. Each card leads to carefully selected materials.
01
Does the organization need to appoint a DPO?
Materials on the obligation, independence, and organization of the DPO function.
02
An incident or breach has occurred
Materials on initial decisions, risk assessment, and documenting reporting decisions.
03
Management is preparing the organization for NIS2
Materials on responsibility, gap analysis, plan, and oversight of implementation.
04
Training is needed
Materials on target groups, program, frequency, and evaluation of results.
FEATURED MATERIAL
Recommended material
-
Does every data breach need to be reported?
Not every one. Reporting to the UODO is the rule, from which one can only deviate based on a documented risk assessment for data subjects. The 72-hour deadline…
FOR MANAGEMENT
Materials supporting oversight and decisions
-
Where should the board begin preparing for NIS2?
With two board decisions: who is the entity manager within the meaning of the KSC Act, and whether the qualification has been documented. Only after these does a…
-
How to determine if an organization must appoint a DPO?
The obligation to appoint a Data Protection Officer arises in three cases under Article 37(1) of the GDPR. None of the conditions refer to the size of the…
LATEST
Latest materials
-
Where should the board begin preparing for NIS2?
With two board decisions: who is the entity manager within the meaning of the KSC Act, and whether the qualification has been documented. Only after these does a…
-
How often should employees be trained on personal data protection?
The GDPR does not specify training frequency. The rhythm is set by changes in processes, staff turnover, conclusions from incidents, and test results — and for entities covered…
-
Does every data breach need to be reported?
Not every one. Reporting to the UODO is the rule, from which one can only deviate based on a documented risk assessment for data subjects. The 72-hour deadline…
-
How to determine if an organization must appoint a DPO?
The obligation to appoint a Data Protection Officer arises in three cases under Article 37(1) of the GDPR. None of the conditions refer to the size of the…
ORGANIZATIONAL CONTEXT
Do you need to relate the topic to your organization’s situation?
The material can help structure the problem, but it does not replace an assessment of the actual state of affairs. If a decision requires considering processes, systems, responsibilities, or actual risk, let’s start with a diagnostic conversation.