General Data Protection Regulation (GDPR)

​

Overview

​

Compliance Deadlines

​

Stakeholder Roles

• manufacturer - Developers of data processing systems and tools
• importer - Entities bringing data processing services into the EU
• distributor - Processors making data services available
• authorized_representative - EU representatives for non-EU controllers/processors
• notified_body - Certification bodies for data protection
• market_surveillance - Supervisory authorities (DPAs)
• consumer - Data subjects (natural persons)

​

Requirement Types

• obligation - Mandatory data protection requirements
• prohibition - Processing activities that are forbidden
• right - Data subject rights (access, rectification, erasure, etc.)
• procedure - Procedures for compliance and breach notification
• general - General provisions and definitions

​

API Usage

# Get all GDPR articles
curl https://api.law4devs.eu/v1/frameworks/gdpr/articles

# Get GDPR framework details
curl https://api.law4devs.eu/v1/frameworks/gdpr

# Get GDPR requirements
curl https://api.law4devs.eu/v1/frameworks/gdpr/requirements

# Get GDPR recitals
curl https://api.law4devs.eu/v1/frameworks/gdpr/recitals

# Python SDK
from law4devs import Law4Devs

client = Law4Devs(api_key="your-api-key")

# List all GDPR articles
articles = client.articles.list("gdpr")

# Get GDPR requirements by stakeholder role
requirements = client.requirements.list("gdpr", role="manufacturer")

# Search GDPR articles by tag
articles = client.articles.search("gdpr", query="consent")

// TypeScript SDK
import { Law4Devs } from '@law4devs/sdk';

const client = new Law4Devs({ apiKey: 'your-api-key' });

// List all GDPR articles
const articles = await client.articles.list('gdpr');

// Get GDPR requirements by stakeholder role
const requirements = await client.requirements.list('gdpr', { role: 'manufacturer' });

​

Key Topics

• Lawful basis for processing
• Data subject rights (access, rectification, erasure, portability, objection)
• Controller and processor obligations
• Data protection impact assessments
• Breach notification requirements
• International data transfers
• Administrative fines and penalties