GDPR & Data Privacy Checklist
A practical, interactive checklist for data protection compliance. Work through 23 concrete steps across six areas — knowing your data, transparency and consent, individuals' rights, security, vendors and transfers, and accountability — tick them off as you go, and copy your progress as a report.
Go through each section and tick items you've completed; progress is saved in your browser. The checklist covers the GDPR and UK GDPR's core obligations — lawful basis, privacy notices, cookie consent, data subject requests, security, breach notification, processor agreements, international transfers, DPIAs and DPOs — and is a useful base for CCPA and other laws.
Your progress is saved in this browser only.
Know your data
Transparency & consent
Individuals' rights
Security
Vendors & transfers
Accountability
Zero Server Uploads
Files process in local RAM
Instant WASM Speed
No waiting queues or lags
Unlimited Batching
Convert files without limits
Suggest a Feature or Improvement for GDPR Checklist
Need custom options, higher limits, or extra format support? Let our engineering team know!
How to use GDPR Checklist
- 1Read each item and tick those you've done.
- 2Focus on unticked items in “Know your data” and “Security” first.
- 3Copy the checklist as a Markdown report.
- 4Review it at least once a year.
Where to start
You can't protect data you don't know about, so begin by mapping what personal data you collect, where it lives and who you share it with. Then check you have a lawful basis for each use, a clear privacy notice, and consent where required — especially for cookies and marketing.
Small businesses often overlook processor agreements with their hosting, email and analytics providers, and a plan for data breaches (72-hour notification).
Helpful tools
Generate a Privacy Policy and Cookie Policy, check your site's HTTPS with the SSL Checker, and audit cookie flags with the Cookie Security Checker.
Frequently Asked Questions
Does completing the checklist make me compliant?
It covers the main obligations, but compliance depends on your specific processing. It's guidance, not legal advice.
Where is my progress saved?
In your browser's local storage on this device only. Nothing is sent to us.
Is it free? Do I need an account?
It's completely free with no sign-up and no daily credits.
Related Tools
Privacy Policy Generator
Generate a clear privacy policy for your website or app covering GDPR and CCPA — free template.
Cookie Policy Generator
Generate a cookie policy with a table of the cookies your services set — Google Analytics, AdSense and more.
Cookie Security Checker
Check a site's cookies for Secure, HttpOnly, SameSite, prefix and scope issues.