The aim of this study is to present the research and development regarding the implementation of a high-fidelity prototype of a recommendation platform (IRIS) for compliance of health projects with GDPR. Findings from our user research corroborate current literature insights that health researchers are concerned in keeping personal and sensitive data processing private and secure, while managing their research project. Participants also agree on the complexity and impact of implementing GDPR compliance in practice, and the need for support and guidance, preferably with the use of interactive/dynamic tools that can help them during the whole process. Findings from the user centered design guided the creation of the IRIS prototype, which was tested in two iterations for its usability, interaction experience and satisfaction. IRIS has been positively assessed and sets the ground to integrate more complex, intelligent and interactive features. IRIS aims to become a free and adaptable tool for health projects to comply with the various personal data privacy requirements that researchers face every day.