GDPR and data protection compliance for nonprofits
You collect personal data from donors, beneficiaries, and partners with no formal compliance framework — and you know it is only a matter of time before that becomes a problem.
What you'll achieve
A documented, compliant data protection framework that meets your legal obligations and builds trust with the people whose data you hold.
How a Nonprofit Builder consultant helps
- Conduct a data audit, review your current policies and practices, identify gaps against GDPR requirements, and develop the documentation and processes needed for compliance.
Key deliverables
- Data audit report, record of processing activities, privacy policy, data protection policy, consent management guidance, staff training session, recommended review schedule.
Related projects
More from Technology & digital tools
AI tools assessment & policy development
“Staff are using AI tools informally and differently — with no guidance on data privacy, appropriate use, or how to get value from them responsibly.”See project
CRM selection & implementation
“Donor and stakeholder data is scattered across spreadsheets, inboxes, and individual staff members' heads — relationships fall through the cracks and nobody has a complete picture.”See project
Digital security training & policy
“Staff use weak passwords, share sensitive files over personal channels, and have no shared understanding of digital risks — your organisation is more exposed than you realise.”See project
Often paired with
Data collection tool design & implementation
“Your team uses a patchwork of spreadsheets, paper forms, and ad hoc surveys — data is incomplete, inconsistent, and impossible to aggregate.”See project
Digital safeguarding policy
“Your safeguarding policies say nothing about online risks — staff are communicating with beneficiaries over WhatsApp, social media, and personal email with no guidance at all.”See project
From the resource library
Free tools and guides to get started
- 12.2C157
Responsible Data Handbook
A handbook on the ethics and risks of collecting and using data about people in international development work. It follows the project lifecycle: designing a project, managing data, getting, understanding and sharing data, and closing a project. Chapters can be read alone or in sequence. A team of 12 practitioners wrote it in a 3-day book sprint. It is free under a CC BY-SA 4.0 licence.
Start hereClassicKey manual or guideFree - 12.3C160
Nonprofit AI Policy Builder
A free online tool that helps a nonprofit draft its own AI policy covering governance, data privacy, risk management and ethics. Users share their mission and AI use, choose a light, standard or advanced policy, and answer tailored questions. The tool uses generative AI to draft the policy, which the team then edits and publishes. A draft takes about 20 minutes and needs no sign-up.
Start hereCurrentTool or templateFree