safety
GDPR Compliance Checklist
A practical checklist for small teams handling personal data.
Map the data you hold
What, where, why, who can access and how long.
~120 min
Record the lawful basis
One per processing activity, documented.
~60 min
Publish a clear privacy notice
Plain language, easy to find, kept current.
~60 min
Fix consent mechanisms
Opt-in, granular, withdrawable and logged.
~60 min
Set up a rights request process
Identify, verify and respond within one month.
~60 min
Review processor contracts
Written terms with every supplier that touches data.
~90 min
Prepare breach reporting
72-hour process with a named owner and template.
~60 min
Train the team annually
Record attendance and refresh policies.
~45 min
Frequently asked questions
Run this checklist in Lemplates
Track every step, assign teammates, and ship faster.