GDPR Compliance Checklist
Evaluate your business GDPR compliance, track progress, and generate a clear action plan.
Select Your Business Type
Checklist
Scoring
Action Plan
Indicative self-assessment, not an audit or legal advice. The items shown depend on the selected profile; your ticks are saved only in this browser.
Support TinyToolWeb
Help us keep these tools free and privacy-friendly.
About GDPR Compliance Checklist
This tool helps businesses assess GDPR compliance using a structured checklist, compliance scoring, and a prioritized action plan.
Features
- Interactive Checklist: Track completed GDPR requirements.
- Compliance Scoring: See compliance percentages by category.
- Action Plan: Focus on high-risk and missing items.
- Local Save: Progress saved in your browser.
- PDF Export: Download your results instantly.
How to Use
- Step 1: Choose your business type.
- Step 2: Complete the checklist items.
- Step 3: Review scores and recommendations.
- Step 4: Export your compliance report.
Use Cases
- Website Owners: Verify GDPR basics quickly.
- E-Commerce: Ensure lawful customer data handling.
- SaaS & Apps: Monitor technical and operational compliance.
Key obligations to know
- Record of processing (art. 30): required for almost every business, the under-250-employees exemption being very narrow.
- Data breaches (art. 33-34): notify the supervisory authority within 72 hours when there is a risk, inform people when the risk is high, keep an internal log in every case.
- Data subject rights (art. 12): answer within one month, extendable by two months where necessary.
- DPO (art. 37): mandatory for public bodies and for large-scale monitoring or large-scale sensitive data.
- Fines (art. 83): up to €20 million or 4% of worldwide annual turnover.
Limitations
- Not an audit: the checklist covers the essentials, not every situation (health data, children, video surveillance…).
- Sources: the GDPR text and the CNIL guides, to check for details.