# GDPR

Source: https://s3msecurity.com/compliance/gdpr/
Last updated: 2026-11-12

S3M supports the security articles of GDPR with technical controls. ConnGuard NAC and EndGuard limit which users and devices reach systems that hold personal data, SpotGate keeps guest traffic apart and records guest sessions, and SAMI answers access questions from telemetry. The table shows which product supports which article; the legal duties stay with you.

**Regulation (EU) 2016/679, the General Data Protection Regulation.** Applies to: Organizations that process personal data of people in the EU. Official text: https://eur-lex.europa.eu/eli/reg/2016/679/oj

## How S3M supports it

| Article / control | What it asks | How S3M supports it | Products |
| --- | --- | --- | --- |
| Art. 5(1)(f) | Keep personal data secure, including against unauthorized access, loss or damage. | ConnGuard NAC admits users and devices to the network by identity and role, so systems that hold personal data are reachable only by those allowed. EndGuard keeps checking the device during the session. | ConnGuard NAC, EndGuard |
| Art. 32(1)(b) | Keep processing systems confidential, intact, available and resilient on an ongoing basis. | EndGuard isolates an endpoint that turns compromised during its session, and CityGate segments users and systems without VLANs, which limits how far a problem spreads. | EndGuard, CityGate |
| Art. 32(1)(d) | Test and evaluate regularly how well the security measures work. | SAMI answers questions about access and device state from telemetry, with the source shown, which provides evidence for these reviews. | SAMI |
| Art. 32(2) | Choose measures with the risks in mind, such as unauthorized disclosure of or access to personal data. | ConnGuard NAC keeps unknown devices off internal networks, and SpotGate keeps guest traffic apart from the corporate network. | ConnGuard NAC, Spotgate |
| Art. 33(5) | Document every personal data breach: the facts, its effects and the remedial action taken. | SpotGate and SAMI keep audit-ready records of who connected, with which device and when, which helps you write the breach record. | Spotgate, SAMI |

S3M supports these requirements with technical controls. This is not legal advice or a certification; confirm legal questions with your counsel.

Checked against the official text on 2026-11-12.

## Frequently asked questions

### Can S3M replace a GDPR assessment?

No. S3M supports the technical security measures listed in the table. Lawful basis, data subject rights, records of processing and notifying the authority remain your organization’s work, so confirm legal questions with your counsel.

### Does S3M encrypt personal data?

No. S3M controls and records network access; it does not encrypt data. Article 32 also names encryption, so pair S3M with the encryption and backup tools you already use.

### Which S3M product helps with guest Wi-Fi under GDPR?

SpotGate. It identifies each guest by SMS, OAuth, voucher or sponsor, keeps guest traffic apart from the corporate network and stores guest sessions for audits.