This project demonstrates a structured GDPR compliance framework tailored for SMEs. It includes risk identification and prioritization through a practical risk matrix, along with a clear action plan to implement privacy controls, assign internal responsibilities, and establish ongoing compliance monitoring. The approach supports alignment with EU data protection requirements while maintaining operational efficiency.