Using Wazuh for GDPR compliance

The European Union's General Data Protection Regulation (GDPR) was created to establish a harmonized data privacy framework across Europe. Its primary focus is protecting the data of European Union citizens. The regulation aims to improve user data privacy and reform the way European Union organizations approach data privacy.

Wazuh helps with GDPR compliance by performing log collection, file integrity monitoring, configuration assessment, intrusion detection, and automated threat response. To view the GDPR related data on the Wazuh dashboard:

  1. Click the menu icon, then navigate to Security operations > Regulatory Compliance > GDPR.

  2. Click Dashboard to get an overview such as the top 10 agents, GDPR requirements, and top requirements over time.

  3. Switch to the Controls tab to view the GDPR requirements breakdown.

  4. Switch to the Findings tab to view the findings related to the GDPR requirements. This shows GDPR findings generated within your environment regardless of the log source.

Wazuh includes default rules and decoders that detect attacks, system errors, security misconfigurations, and policy violations. By default, these rules map to the associated GDPR requirements. In Wazuh 5.0, rules use the Sigma format. You can map a custom rule to one or more GDPR requirements. To do this, add the requirement to the gdpr list under the compliance field of the rule. For example, II_5.1.f.

compliance:
  gdpr:
    - II_5.1.f
    - IV_32.1.a
    - IV_33.1

The Wazuh for GDPR white paper (PDF) explains how Wazuh modules help with GDPR compliance. This document does not cover the formal GDPR requirements, because they fall outside its technical scope.

You can find technical requirements that Wazuh supports in the following sections: