We are aware that adequate personal data and privacy protection is a bit of a challenge for entrepreneurs, especially in the regard of GDPR. A variety of encountered legal types of solutions, as well as lack of guidelines, cause a sense of chaos and confusion. On the basis of our experience, we have worked out our own pattern of creating regulatory framework for proper personal data protection. Suggested options always respond to previously defined individual needs of a certain enterprise. These possibilities are flexible, thereby we have had some successful implementations in foreign corporations and in smaller entities from the SME sector.