The European General Data Protection Regulation recommends to set up a registry to capture for each dataset containing sensitive personal data details about the treatment of the dataset. This profile extends the ISO 19139 schema to facilitate to capture typical GDPR metadata elements, that do not fit in any of the ISO 19139 fields.
This software can be plugged on top of the GeoNetwork software to provide a full GDPR registry.