Best EU Compliance Firms Guide
Compare EU compliance firms without relying on self-published rankings: scope, named experts, evidence, delivery model, conflicts, security, and price.
Robert Lozo
13 MIN READ · MAR 28, 2026
Insights.
Briefings, opinions, and practical guidance from our partners. Written for people who have to implement the rules.
38BRIEFINGS2AUTHORSWKUPDATED WEEKLY
BROWSE BY TOPIC
All briefings38 POSTS
How to Choose a GDPR Consultant
A practical framework for evaluating GDPR consultants by scope, evidence, independence, delivery method, and fit.
Ivana Ludiga
10 MIN READ · MAR 28, 2026
Compliance as a Service Guide
Compliance as a Service guide for EU regulation: what to outsource, what accountability stays in-house, operating models, contracts, evidence, and provider selection.
Robert Lozo
14 MIN READ · MAR 28, 2026
EU Data Sovereignty Guide
How EU organisations can govern data location, access, control and international transfers without treating residency as a complete solution.
Robert Lozo
11 MIN READ · MAR 28, 2026
EU Compliance Statistics 2026
Verified EU compliance statistics for 2026 from EDPB, Eurostat, ENISA, the European Commission, the ESAs, and EUR-Lex, with dates and denominators.
Robert Lozo
12 MIN READ · MAR 28, 2026
GDPR Compliance Checklist 2026
An evidence-based GDPR checklist covering scope, lawful processing, rights, vendors, security, DPIAs, transfers, and governance.
Robert Lozo
12 MIN READ · MAR 28, 2026
GDPR for Startups Guide
A risk-based GDPR roadmap for startups covering product design, vendors, legal bases, notices, rights, transfers, and evidence.
Ivana Ludiga
11 MIN READ · MAR 28, 2026
UK GDPR vs EU GDPR Differences
A practical comparison of EU GDPR and UK GDPR scope, regulators, representatives, transfers, and dual-regime operations.
Ivana Ludiga
11 MIN READ · MAR 28, 2026
Incident Response Plan Template
A copy-ready incident response plan structure with activation criteria, roles, evidence, recovery checks, and qualified GDPR and NIS2 notification records.
Robert Lozo
14 MIN READ · MAR 28, 2026
Information Security Policy Template
A practical information security policy template covering scope, authority, risk, access, incidents, suppliers, continuity, exceptions, and evidence.
Ivana Ludiga
13 MIN READ · MAR 28, 2026
ISO 27001 Certification Cost Guide
Scope the real cost of ISO/IEC 27001:2022 implementation, internal effort, remediation, certification audit, surveillance, and ongoing ISMS operation.
Robert Lozo
10 MIN READ · MAR 28, 2026
NIS2 vs ISO 27001 Guide
Compare NIS2 legal duties with ISO/IEC 27001:2022 ISMS requirements and certification without relying on invented overlap percentages.
Robert Lozo
11 MIN READ · MAR 28, 2026
Vendor Risk Assessment Template
A copy-ready vendor risk template for relationship scoping, targeted due diligence, evidence review, residual-risk decisions, contracting, monitoring, and exit.
Ivana Ludiga
14 MIN READ · MAR 28, 2026
Employer of Record Croatia Guide
Employer of Record Croatia guide: legal structure, agency-work risk, employment contracts, payroll, tax, leave, permits, termination, GDPR, and due diligence.
Robert Lozo
17 MIN READ · FEB 12, 2026
CSRD Reporting Guide
CSRD reporting guide updated for the stop-the-clock and Omnibus I changes: scope, FY 2027 timetable, ESRS, double materiality, assurance, and preparation.
Robert Lozo
17 MIN READ · FEB 05, 2026
Cyber Insurance Requirements Guide
Prepare for cyber insurance underwriting by defining exposures, validating security evidence, reading exclusions, and rehearsing the claims process.
Robert Lozo
11 MIN READ · JAN 29, 2026
SOC 2 vs ISO 27001 for SaaS
Compare a SOC 2 CPA attestation report with ISO/IEC 27001:2022 certification by audience, scope, criteria, period, assurance, and evidence.
Robert Lozo
12 MIN READ · JAN 22, 2026
Outsourcing Compliance Guide
Decide what compliance work to outsource, retain accountable ownership, select a provider, contract for evidence and incidents, and govern exit.
Robert Lozo
11 MIN READ · JAN 15, 2026
Vendor Risk Assessment Guide
Build a risk-based vendor assessment process covering scope, due diligence, contracts, evidence, monitoring, incidents, concentration, and exit.
Ivana Ludiga
13 MIN READ · JAN 08, 2026
Virtual CISO Services Guide
Evaluate a virtual or fractional CISO by mandate, authority, capacity, independence, deliverables, incident role, evidence, and transition.
Robert Lozo
11 MIN READ · DEC 18, 2025
DPO as a Service Guide
How outsourced DPO services work, what the GDPR requires, and how to evaluate independence, capacity, and coverage.
Ivana Ludiga
11 MIN READ · DEC 11, 2025
AI Risk Assessment Framework
Build an AI risk assessment framework for the EU AI Act: classify systems, distinguish provider and deployer duties, document controls, and retain evidence.
Robert Lozo
16 MIN READ · DEC 04, 2025
EU AI Act: Provider & Deployer Requirements and Deadlines
EU AI Act guide updated for Regulation (EU) 2026/1744: current duties, provider and deployer roles, risk classification, transparency, and high-risk dates.
Robert Lozo
18 MIN READ · NOV 27, 2025
EU Compliance Playbook for SaaS
EU compliance playbook for non-EU SaaS companies: scope GDPR, NIS2, DORA, the AI Act, accessibility, representatives, contracts, and market-entry evidence.
Robert Lozo
18 MIN READ · NOV 20, 2025
Standard Contractual Clauses Guide
How to use the European Commission's 2021 SCCs for international transfers, select modules, assess effectiveness, and maintain evidence.
Ivana Ludiga
12 MIN READ · NOV 13, 2025
GDPR Representative Article 27 Guide
When a non-EU controller or processor needs an Article 27 representative, what the role does, and how to appoint one.
Ivana Ludiga
10 MIN READ · NOV 06, 2025
GDPR for US Companies
How US companies should assess EU GDPR scope, representation, lawful processing, transfers, vendors, and operational compliance.
Ivana Ludiga
12 MIN READ · OCT 30, 2025
NIS2 Compliance Checklist
An evidence-based NIS2 checklist for scope, national law, management oversight, Article 21 measures, Article 23 reporting, suppliers, and assurance.
Robert Lozo
15 MIN READ · OCT 23, 2025
DORA Compliance Guide
DORA compliance guide for financial entities: scope, management accountability, ICT risk, incident reporting, testing, third-party contracts, and registers.
Robert Lozo
17 MIN READ · OCT 16, 2025
Business Continuity Plan Guide
Build a usable business continuity plan with a business impact analysis, recovery objectives, response roles, supplier contingencies, exercises, and evidence.
Robert Lozo
12 MIN READ · OCT 09, 2025
Incident Response Plan Guide: NIST, GDPR and NIS2
Build an incident response plan around NIST CSF 2.0, decision-ready roles, evidence preservation, and correctly qualified GDPR and NIS2 reporting workflows.
Robert Lozo
13 MIN READ · OCT 02, 2025
Information Security Policy Guide
Design an information security policy system with clear authority, risk-based rules, evidence, exceptions, ownership, and review.
Robert Lozo
11 MIN READ · SEP 25, 2025
GDPR Data Mapping & ROPA Guide
How to build a useful GDPR data map and records of processing activities without confusing the two.
Ivana Ludiga
11 MIN READ · SEP 18, 2025
Privacy Impact Assessment Guide
How to screen for and complete a GDPR data protection impact assessment before high-risk processing starts.
Ivana Ludiga
13 MIN READ · SEP 10, 2025
Data Protection Officer Guide
When the GDPR requires a DPO, what the role must do, and how to protect its independence in practice.
Ivana Ludiga
10 MIN READ · SEP 03, 2025
ISO 27001 Implementation Guide
Implement ISO/IEC 27001:2022 as an operating information security management system, from scope and risk treatment through assurance and optional certification.
Robert Lozo
14 MIN READ · AUG 26, 2025
What Is NIS2? Directive Guide
Understand NIS2 scope, essential and important entities, Article 20 management duties, Article 21 security measures, Article 23 reporting, and national implementation.
Robert Lozo
15 MIN READ · AUG 19, 2025
GDPR Compliance Guide
A practical guide to GDPR scope, principles, lawful bases, rights, governance, security, DPIAs, transfers, and evidence.
Ivana Ludiga
14 MIN READ · AUG 12, 2025
THE FRIDAY BRIEF
One email. Every Friday.
The week's enforcement actions, new guidance, and deadlines that shifted. 4-minute read.
4,200+ READERS · UNSUBSCRIBE ANY TIME