GDPR Compliance Checklist

GDPR COMPLIANCE

GDPR Readiness Checklist

GDPR COMPLIANCE CHECKLIST

LAWFUL BASIS:
☐ Processing activities documented
☐ Lawful basis identified for each
☐ Consent mechanisms (where used)
☐ Legitimate interest assessments

TRANSPARENCY:
☐ Privacy notice updated
☐ Cookie notice/consent
☐ Processing information provided
☐ Third-party sharing disclosed

DATA SUBJECT RIGHTS:
☐ Access request process
☐ Rectification process
☐ Erasure ("right to be forgotten")
☐ Data portability
☐ Objection process
☐ Response within 30 days

DATA PROTECTION:
☐ Data minimization practiced
☐ Purpose limitation enforced
☐ Storage limitation implemented
☐ Encryption implemented
☐ Access controls in place

ACCOUNTABILITY:
☐ Records of processing
☐ DPA with processors
☐ DPIA where required
☐ DPO appointed (if required)

BREACH NOTIFICATION:
☐ Breach detection process
☐ 72-hour notification process
☐ Data subject notification process
☐ Breach register maintained

Data Processing Records Template

RECORD OF PROCESSING ACTIVITIES

ACTIVITY: _______________
Controller: _______________
Purpose: _______________
Lawful basis: _______________

CATEGORIES OF DATA SUBJECTS:
☐ Customers
☐ Employees
☐ Prospects
☐ Other: _______________

CATEGORIES OF PERSONAL DATA:
☐ Contact information
☐ Account data
☐ Payment data
☐ Other: _______________

RECIPIENTS:
Internal: _______________
Processors: _______________
Third countries: _______________

RETENTION:
Period: _______________
Basis: _______________

GDPR Key Definitions

Term	Definition
Personal data	Info relating to identifiable person
Processing	Any operation on personal data
Controller	Determines purposes and means
Processor	Processes on behalf of controller

---