GDPR Anniversary - Time To Take Your Business For A Data Protection Compliance Check-up

It's already the third anniversary of the GDPR!

Here are 10 questions that controllers should consider when self-assessing their compliance. Most of these questions are relevant for processors too!

1. Have you set up and maintained a record/register of processing activities?
2. Are you identifying, on an ongoing basis, lawful bases for all the processing you carry out (including recording consent as appropriate and conducting a balancing test if relying on legitimate interest)?
3. Are you drafting or updating your internal data protection policy and privacy information notice?
4. Are you putting in place processes and procedures to respond to data subjects' requests (access, update, erasure, etc.) and managing data breaches?