The EU GDPR, UK GDPR, national ePrivacy rules, and cyber-resilience regimes use different triggers and deadlines. CloudAlls assesses establishment, targeting, monitoring, controller or processor role, cookies, transfers, and sector scope.
Our privacy materials should identify the controller, Data Protection Officer or representative where required, purposes, lawful bases, recipients, retention, transfers, rights, automated decision-making, and supervisory-authority routes. The request workflow supports identity verification, secure delivery, extensions, exemptions, and documented closure.
Non-essential device storage or access is controlled through the Privacy Choices page where consent is required. International transfers are documented through adequacy, standard contractual clauses, the UK IDTA or Addendum, binding corporate rules, or another applicable mechanism.
NIS2 and UK NIS obligations are assessed only where the service, sector, size, criticality, and designation tests are met. They are not generic website requirements.