Compliance

GDPR Compliance Checklist

Comprehensive checklist for GDPR compliance — data mapping, consent management, rights handling, and breach notification.

Data Inventory & Mapping

Create a record of processing activities (Article 30)Map all personal data flows between systems and third partiesClassify data by category (standard, special category, criminal)Identify the lawful basis for each processing activity

Consent & Legal Basis

Review consent collection mechanisms for freely given, specific, informed consentImplement granular consent options (not bundled with T&Cs)Ensure consent withdrawal is as easy as giving consentDocument legitimate interest assessments where applicable

Data Subject Rights

Implement process for right of access requests (30-day response)Enable right to rectification of inaccurate dataBuild data portability export in machine-readable formatConfigure right to erasure (right to be forgotten) workflow

Security & Breach Response

Implement appropriate technical measures (encryption, access controls)Conduct Data Protection Impact Assessments for high-risk processingEstablish 72-hour breach notification process to supervisory authorityDocument breach response procedures and communication templates

Governance

Appoint a Data Protection Officer if requiredImplement privacy-by-design in product development processesMaintain vendor data processing agreements (Article 28)Conduct annual GDPR compliance reviews and staff training

Get this as a downloadable PDF

Enter your email to receive a beautifully formatted PDF version of this checklist — perfect for printing or sharing with your team.

Related AI Analysis Tools

Go further than a checklist — let AI analyze your documents automatically.

AI Analyze Compliance Document AI Summarize Policy AI Review Compliance Document

Analyze Your Documents with AI

Upload any document and get AI-powered analysis with verifiable, click-to-source citations. Free to try.

Start Free