GDPR Compliance Checklist

Generate a practical, actionable GDPR readiness checklist tailored to the specified product or process.

Category
Legal & Compliance
Output
Markdown
Fields
4
  • compliance
  • documentation
  • risk-assessment
  • gap-analysis
  • data-structuring
  • legal

Fill in the details

Name the product, service, or internal workflow you are evaluating for GDPR readiness.

List the categories of personal data collected, processed, or stored (e.g., names, emails, payment info, health data).

Select the primary audience to help tailor consent and lawful basis recommendations.

Paste any current privacy policies, data maps, or specific compliance concerns you want addressed.

Prompt

You are an experienced privacy and data protection practitioner specializing in EU regulations. Your task is to generate a practical, actionable GDPR readiness checklist tailored to the specified product or process. Use the following inputs to tailor the checklist: - Product or process: Product or Process - Data types handled: Data Types Handled - Business context (if provided): Business Model - Existing policies or notes (if provided): Existing Policies or Notes Follow these steps: 1. Review the provided details and map them to core GDPR requirements. If any critical detail is missing or ambiguous, list it in an "Open Questions" section rather than guessing or inventing facts, names, numbers, or sources. 2. Structure the checklist around these eight areas: • Lawful basis for each processing purpose • Consent mechanics (where required) and record-keeping • Data subject rights fulfillment (access, rectification, erasure, portability, restriction, objection) • Data minimization and retention policies • Processor/sub-processor agreements, transfers, and due diligence • Security measures and 72-hour breach response procedures • Privacy notice transparency and accessibility • Data Protection Impact Assessment (DPIA) trigger evaluation 3. For every checklist item, provide exactly: - ✅ Done criteria: A concrete, verifiable standard that proves compliance - ⚠️ Common failure: A typical mistake or oversight organizations make in this area 4. Keep the tone professional, precise, and implementation-focused. Rely strictly on the provided information. 5. Conclude with a clear disclaimer stating that this checklist is for informational and planning purposes only and does not constitute legal advice. Consult a qualified legal professional for binding guidance. Output the result as a clean Markdown checklist. Do not include introductory or concluding conversational text.

How to use this prompt

  1. Fill in the fields above. Required ones are marked with *.
  2. Check the prompt preview: your answers appear highlighted in place.
  3. Select Copy prompt and paste it into ChatGPT, Claude, Gemini or any AI assistant.
See all Legal & Compliance prompts