GDPR Compliance Checklist: 15 things to know

Establish a valid legal basis for processing personal data.

Maintain an up-to-date, understandable, and easily accessible privacy and cookie policy on your website or app.

Clearly describe the types of personal data collected and the purposes behind their collection in your privacy and cookie policy.

Accurately list all third parties with whom the data is shared in your privacy and cookie policy.

Inform users of their rights concerning their data in your privacy and cookie policy.

Ensure consent mechanisms are unambiguous and involve an explicit “opt-in” action. Avoid pre-ticked boxes and opt-out mechanisms.

Clearly state your intentions, provide links to your privacy policy, and obtain opt-in consent for various activities through contact, newsletter, and registration forms.

Maintain clear records of consent, including details like the time of consent, preferences expressed, accompanying legal or privacy notices, and the specific form used.

Enable customers to easily request and receive information about the data you hold on them.

Provide accessible means for customers to correct or update inaccurate or incomplete data.

Allow customers to easily to object to specific processing activities.

Facilitate customers in receiving their personal data in a format that can be readily transferred to another company.

Simplify the process for customers to request the deletion of their personal data..

Enable customers to request the restriction of processing their personal data..

Implement robust technologies and procedures to detect, report, and investigate any personal data breach.

Maintain detailed records of data storage, usage, and processing activities, including data retention policies, security measures, legal basis for processing, data transfers outside the EU, and the parties involved in data sharing.