Compliance
GDPR compliance.
Fineteklabs helps you meet the data protection requirements that apply to the systems we build and operate for you.
This page was last reviewed in 2026.
What GDPR is
The GDPR replaced a patchwork of national privacy laws with a single standard applying directly across the EU.
Why it matters to us and to you
The GDPR applies to organisations inside or outside the EU that handle personal data belonging to individuals in the EU, including names, identification numbers, location data and online identifiers.
- New and strengthened rights for individuals
- Accountability requirements for organisations
- Increased scrutiny and enforcement by regulators
- Material penalties for non-compliance
What the GDPR requires
The GDPR builds on established privacy principles: purpose limitation, lawfulness, transparency, integrity and confidentiality. It formalises accountability and data minimisation.
- Data security
- Appropriate technical and organisational controls to prevent data loss, leaks and unauthorised processing. Encryption, incident management and system resilience are in scope.
- Extended individual rights
- Greater control over personal data, including portability and the right to erasure.
- Breach notification
- Regulators and affected individuals must be informed without undue delay once a breach is known.
- Security audits and records
- Organisations must document security practices, audit their controls and correct what fails.
How this affects our services
We help customers meet the requirements relevant to the products and services we provide, including processor accountability.
How Fineteklabs supports your compliance
Our commitment is backed by capabilities across the engagements we run.
Collecting personal data
Systems that capture personal data across the channels you use, with consent and preference controls for informed decisions.
Managing personal data
Data inventories, retention rules and subject-rights workflows, so access, correction, export and erasure requests are answered on time.
Protecting personal data
Encryption in transit and at rest, pseudonymisation where appropriate, role-based access control and full audit trails.
Data protection contact
For data protection enquiries, processing agreements, sub-processor lists or security questionnaires, contact us directly. We respond within five working days.
Monday to Friday, 08:00 to 18:00 East Africa Time (GMT+3). Urgent support by arrangement.
Some long-form technical and legal documents are published in English only.