Legal & compliance aspects

Home » Legal & compliance aspects

Welcome to the Survey on Legal Compliance to the General Data Protection Regulation!

The aim of this survey is to collect relevant information, from European Projects of Research and Innovation (R&I) about their level of legal compliance, in light of the upcoming Regulation EU 2016/679 (the “GDPR”).

As you may know, the project aims to contribute to a safer and more trusted Digital Single Market, by promoting the understanding of cutting-edge cybersecurity and privacy services, which emerge from R&I initiatives. The role of the R&I projects is very important in this effort. On one hand, by submitting to the Catalogue of Services, R&I Projects get to communicate their objectives and disseminate their results to a broader audience. On the other hand, since R&I projects are likely process personal data, it is paramount that these processing activities carried out are compliant with the Data Protection Laws; more precisely with the GDPR. The GDPR will be directly applicable in all the European Member States from the 25th of May 2018. The GDPR is the most recent European Legislation on Data Protection, updating and harmonizing the various legal frameworks existing around the EU.

The GDPR applies to organizations:

- established in the European Union, that process personal data (information related to individuals, e.g., names, surnames, email addresses, physical addresses, telephone numbers, bank account details, and also – as consistently maintained by Supervisory Authorities and relevant Courts - IP addresses, MAC addresses, etc.).

- NOT established in the European Union, that that process personal data of individuals, who are in the European Union, in the context of:

  1. the offering of goods or services, irrespective of whether a payment is required; or
  2. the monitoring of the behavior of such individuals as far as their behavior takes place within the European Union.

Your contribution to this survey is necessary as your feedback will help us analyse the EU Cybersecurity & Privacy framework, also with reference to the R&I Projects. The objective is to provide recommendations to R&I projects in order to support them in addressing compliance with the GDPR.

A public deliverable containing the results of this survey will be published in 2018.  By participating to this survey, you will be able to obtain early access to the results of the survey at the First Concertation Meeting to be held in Spring next 2018.

Please note that all fields marked with * are mandatory.

Please take the time to read and review the web plaform Terms and Conditions of Use and Privacy Policy.


On 18 July 2019, will organize a webinar in collaboration with the GDPR Cluster projects entitled “GDPR compliance in the emerging technologies”.

Future Events

The 14th International Conference on Availability, Reliability and Security (ARES 2019), will be held from August 26 to August 29, 2019 at the University of Kent, Canterbury, UK.

26/08/2019 to 29/08/2019

PROTECTIVE is co-organising the 2nd International Workshop on Cyber Threat Intelligence Management(CyberTIM 2019) as apart of the ARES 2019 conference in the UK on 26-29 August 2019.

26/08/2019 to 29/08/2019