A Review of existing GDPR Solutions for Citizens and SMEs

TL;DR

This paper reviews existing GDPR software solutions, analyzing their effectiveness in addressing data access rights for citizens and compliance challenges for SMEs, highlighting gaps and remaining issues.

Contribution

It provides a comprehensive overview of current GDPR solutions, evaluating their capabilities and identifying unresolved problems for citizens and SMEs.

Findings

Many solutions partially address data access rights.

SMEs often lack adequate GDPR compliance tools.

Remaining issues include data transparency and resource limitations.

Abstract

The GDPR grants data subjects certain rights, like the right to access their data from companies, but in practice multiple problems exist with exercising these rights such as unknown data holders or interpreting the received data. Small and medium enterprises on the other hand need to facilitate the obligations given by the GDPR, but often lack proper systems, staff and other resources to do so effectively. For the GDPR to be effective in practice, these problems need to be addressed. With the work at hand we provide an overview of existing software solutions for these problems (from an internet research), discuss to which degree they solve the various problems and what issues remain.