GDPR · Free for every business
GDPR compliance is free at ComplianceSME,
for every business, EU and UK.
The GDPR system is released free to unburden the compliance staff you already have, as the EU AI compliance load arrives on top of NIS2 and AI risk work. The AI Act applies from 2 August, and trained staff are not available to hire in the numbers the market now needs.
Every system carries a training module that holds the regulation itself, so the member of staff who runs it learns the law first. One person reads the module, states what the GDPR requires and whether it binds your business, then runs the system and produces the documentation with the article citations. The EU GDPR and the UK GDPR each have their own system below.
How to get the free systemFind your situation
GDPR (EU), Regulation (EU) 2016/679
FreeThe EU General Data Protection Regulation binds any business that processes the personal data of people in the European Union. Download the starter pack first, then the section that matches your compliance area, one at a time.
Consent management
Get this section free → GDPR (EU) · SectionTransparency and information provision
Get this section free → GDPR (EU) · SectionData subject rights
Get this section free → GDPR (EU) · SectionProcessor relationships and contracts
Get this section free → GDPR (EU) · SectionJoint controllers and representatives
Get this section free → GDPR (EU) · SectionData protection by design, default and security
Get this section free → GDPR (EU) · SectionRecords of processing and supervisory cooperation
Get this section free → GDPR (EU) · SectionBreach notification and impact assessment
Get this section free → GDPR (EU) · SectionData protection officer and international transfers
Get this section free →UK GDPR and DPA 2018
FreeThe UK GDPR and the Data Protection Act 2018 bind any business that processes the personal data of people in the United Kingdom. Download the starter pack first, then the section that matches your compliance area, one at a time.
Data subject rights and complaints
Get this section free → UK GDPR · SectionSecurity and national security processing
Get this section free → UK GDPR · SectionHealth and education data exemptions
Get this section free → UK GDPR · SectionLaw enforcement principles and lawful basis
Get this section free → UK GDPR · SectionLaw enforcement data subject rights
Get this section free → UK GDPR · SectionLaw enforcement technical measures and breach notification
Get this section free → UK GDPR · SectionLaw enforcement automated decisions and international transfers
Get this section free → UK GDPR · SectionIntelligence services processing
Get this section free →The free system
StartFree · EU GDPR and UK GDPR
The GDPR system is free to download. The download needs a free ComplianceSME account, so the files land in your library and so update files can reach you when the law changes. Opening the account includes accepting the free licence terms.
The system is delivered section by section. Your first download is the starter pack: the printed guide, the training module, the reference file, and File 1, which builds your Entity Passport. After that you download one section at a time, when you reach the compliance area it covers.
The system runs inside your own Claude account and requires the Claude Max plan (approximately £90 per month, paid directly to Anthropic) to operate. You upload the files, type START, and the system interviews you one question at a time, then produces your documentation with the article citations.
Membership keeps the system current. When the GDPR or the UK data protection regime changes, an update file arrives in your account, so you never work from a stale version.
Open a free accountThe GDPR is one instrument. Every other regulation that binds your business has its own system in the full register. See all systems in the register →
All ComplianceSME systems, the free and the paid alike, run exclusively on Claude Opus 4.6. Any other model declines the run and names the licence. Why Opus 4.6.