Improve your privacy posture, one skill at a time.
Privacy Just is a working companion for GDPR, ePrivacy and US state privacy laws. Chat with specialist skills, or draft and review your privacy documentation in minutes.
Do we need a DPIA for employee monitoring software?
Very likely, yes. Art. 35(1) GDPR requires a DPIA where processing is likely to result in a high risk to individuals. The EDPB-endorsed WP29 DPIA Guidelines (WP248 rev.01) list systematic monitoring and vulnerable data subjects, which include employees, among the criteria; processing meeting two or more usually needs a DPIA.
Sources: Art. 35(1) GDPR · WP248 rev.01
AI-generated, not legal advice. Illustrative example.
Specialist skills
A focused expert for every question.
Each skill is configured and verified by a practising DPO — no generic AI answers, no invented case law.
Privacy Advisor
EU/UK privacy compliance, tailored to your company profile.
Privacy Doc Builder
Draft and refine your privacy documents.
EU Marketing & ePrivacy
EU marketing and ePrivacy compliance.
US State Privacy
CCPA, VCDPA and other US state laws.
AI Act Advisor
EU AI Act — roles, obligations and deadlines.
Security & NIS2 Advisor
NIS2 applicability and cybersecurity governance.
Breach Triage
Guided incident triage under GDPR and NIS2.
Toolkit
Everything a DPO does — in one workspace.
Purpose-built tools that share the same knowledge, so your ROPA, vendors and breaches feed straight into your audit report.
Vendor register
Sub-processor register + AI risk assessment against Art. 28, 32 and Ch. V.
Open →
ROPA builder
Describe an activity — get an Art. 30 entry with lawful basis, retention and TOMs. Export to CSV.
Open →
Breach triage
72-hour clock, Art. 33/34 decision and draft notifications in minutes.
Open →
Cookie scanner
Fetch any URL, list trackers, verdict against ePrivacy Art. 5(3).
Open →
Gap assessment (ISO / SOC 2 / HIPAA / NIST)
Gap assessment and phased roadmap for 27001, 27701, SOC 2, HIPAA or NIST CSF 2.0.
Open →
Audit-ready report
Bundle your workspace into a formal report for auditors, regulators or clients.
Open →
Compliance
Manage ISO 27001 / 27701 controls, your Statement of Applicability and audit binder.
Open →
Training
Run campaigns with video lessons, completion records and certificates.
Open →
Regulatory timeline and alerts
Track relevant AI Act and NIS2 dates, actions, evidence and reminders.
Open →
SCC Composer
Prepare an EU 2021/914 SCC completion sheet and Annexes I–III.
Open →
My Library
Keep generated documents, assessments, training records and uploaded files together.
Open →
Services
Need a human DPO in the loop?
External and fractional DPO support, GDPR audits and gap assessments, ISO 27001 / 27701 preparation, and EU AI Act and AI governance reviews — delivered by Privacy Just's founder, a practising DPO and privacy lawyer (CIPP/E, CIPM).
Documentation
Draft policies. Close gaps. Ship.
Point Privacy Just at a jurisdiction and the shape of your business — get a first draft of a privacy policy, DPA, ROPA or cookie notice. Or paste what you already have and get a clause-by-clause gap review.
Open the doc builder- ✓Privacy policy (GDPR / UK GDPR / CCPA)
- ✓Data Processing Agreement + sub-processor list
- ✓Record of Processing Activities (ROPA)
- ✓Cookie & tracker notice mapped to ePrivacy
- ✓Retention schedule and DPIA template