Check It Out! Do You Fulfil the Requirements of GDPR?

1. Have you ensured that you have the support of the executive management and the necessary resources to implement the data protection regulations and guidelines?

?

2. Have you appointed a data protection officer as the central contact point for GDPR?

?

3. Have you assigned responsibilities for all processes and systems that involve personal data?

?

4. Do you know what the key terms of GDPR, e.g. personal data, data controller, data processor, privacy by design, consent, right to information, data minimization, etc. mean?

?

5. Have you identified all systems and processes used to process personal data? Do you know where personal data is stored and processed? Be careful when defining "personal data", as this usually involves much more than you think.

?

6. Have you analyzed how your personal data is composed and whether you may or must keep it?

?

7. In particular, have you checked cross-border transfers of personal data and, where possible, replaced suppliers/systems that require transfers outside the EU?

?

8. Have you reduced the number of systems used to process and store personal data? Each of these systems requires its own evaluation and documentation.

?

9. Have you checked whether new technologies/services can better protect the privacy of your customers/employees? Leave those who violate privacy.

?

10. Have you checked your legal texts on the website or elsewhere to see if they are GDPR-compliant? Have you made sure that these texts are versioned?

?

11. Have you checked all contracts and data processing agreements with suppliers (e.g. agencies) for necessary changes?

?

12. Have you ensured that the suppliers and services you use are certified by accredited certification bodies? We recommend EuroPrise GDPR, for example, as this is currently the only certification that fully covers all GDPR requirements.

?

?