Compliance Colleague · Tools

Clause lookup

3,045 articles, sections and controls across 12 laws and frameworks · index updated 2026-10-10

Type a clause number or a topic. You get the clause’s heading and a link to the official text. Free, no sign-in.

1 match in GDPR.

  • GDPR · Article 33
    Notification of a personal data breach to the supervisory authority
    Chapter IV — Controller and processor
    Official text (EUR-Lex) →
Found the clause? Compliance Colleague checks your information security policy, a procedure or a network diagram against it, and cites the clause behind every finding. PCI DSS, the EU AI Act, ISO 42001 and 30+ more. Try it free, no card required →

What’s covered

PCI DSS, ISO/IEC 27001, ISO/IEC 42001 and SOC 2 are not here: their publishers hold the copyright in the text and the headings. We link to the publisher instead.

How Compliance Colleague made this

  1. Compliance Colleague ships with the official text of each law and framework above, taken from the publisher (EUR-Lex, the eCFR, NIST and the California Privacy Protection Agency). That text is what its answers cite.
  2. For this page, a script reads those bundled texts and keeps only three things per entry: the number, the heading and a link to the official source. The clause text itself is left out.
  3. Recitals and any heading that is really a cut-off sentence are dropped, and copyrighted standards are excluded. The index is rebuilt whenever a bundled text is updated; the date is at the top of the page.

A research aid, not legal advice. Headings are reproduced from the official texts; the official publication is authoritative. EU links open the act on EUR-Lex; find the article there by its number.