Spain releases online questionnaire tool to help with GDPR compliance On September 6, 2017, the Spanish Data Protection Authority (AEPD) introduced an online questionnaire tool "Facilita RGPD" available here (Spanish language only) intended to help companies and individual professionals comply with the GDPR when processing low risk data. With this free and online tool, the AEPD wants to disclose in a simple way, the new implications and practical changes of the GDPR, so that small or medium sized companies and individual professionals can take the necessary measures to comply. This questionnaire, takes around 20-minutes to complete and is designed to allow the abovementioned users to firstly, verify, through a series of questions, if the user's data that is being processed can be considered as low risk data; and if so, the questionnaire proceeds to ask other questions related to relevant information about the user and the categories of data and purposes of the processing. The online software tool will then make an assessment based on the information provided by the user and will automatically provide the userwith the corresponding documents required comply with its obligations in the GDPR. These documents shall include informative clauses that must be included in personal data collection forms, contractual clauses to append to the contracts of the data processor, the register of processing activities, and an annex with indicative minimum data security measures . However, the online tool is only designed to help companies and individual professionals who process low risk data. If during the questions related to which type of data will be processed by the user, the tool considers that the user is processing high risk data, the tool will stop asking further questions and will warn the user of the processing high risk data. It is also important to mention that this questionnaire is only a tool, therefore, the resulting documentation may have to be adapted and updated in each case. Obtaining the documents does not imply automatic compliance with the GDPR. In addition to this, the AEPD is working on other materials to help companies that process high risk data. Also, the AEPD will provide this tool to the European Data Protection Activity Group so that other Member States can use it for helping companies in their corresponding countries. For more information, please contact Raul Rubio, Patricia Perez, Ignacio Vela, Alvaro Ubeda, Marta De Pablos, Cristina Monereo or Carmen Salazar.