GDPR Compliance Check

💡 Document the legal basis (consent, contract, legal obligation, legitimate interest) for each type of processing.

💡 Create and regularly update the register with all processing operations.

💡 Publish a clear and accessible privacy policy.

💡 Implement explicit consent mechanisms (opt-in) and keep proof.

💡 Assess whether the organization has a legal obligation to appoint a DPO or if it is recommended.

💡 Implement procedures for access, rectification, erasure, portability rights etc.

💡 Implement encryption, access control, backups, password policies.

💡 Establish an internal procedure for detecting and reporting breaches within 72h.

💡 Organize annual training sessions and document attendance.

💡 Implement a cookie banner that blocks cookies until consent.