This is the starting point of your GDPR compliance. Make sure to complete it in each section to get the first steps towards your full GDPR compliance.

Technical controls are an essential part of your GDPR compliance since they help you to assess, implement, and document your data and application security practices.

The record of processing activities allows you to make an inventory of the data processing in your company and to have an overview of what you are doing with the personal data. Keeping compliant and up-to-date ROPA is essential for a healthy privacy program.

It’s easy to make your own privacy notice now, and it’s a good way to show people that you care about their information. It’s also a key requirement under the GDPR to be open with people about how you use their data.

Data controllers and data processors must close a “Data Processing Agreement” in writing – including in electronic form. You can use the following document as part of your GDPR compliance. Since this is only a starter template, it is provided as-is, and its content is offered without warranty of completeness or correctness.