Introduction Business Profile Personal & Sensitive Data Staff Awareness and GDPR Training Lawful Data Processing Consent Privacy Policies and Notices Internal Policies and Procedures Third Party Processing Consider Where Your Data Is Stored Data Retention Data Subject Access Rights Data Subject Requests Right to Data Portability Right to Erasure Right to Rectification Right to Object Data Profiling Processed for Specified, Explicit and Legitimate Purposes Adequate, Relevant and Limited Data Processing Accuracy of Data Restriction of Personal Data Processing Privacy by Design Management Of Electronic And Manual Records Data Protection Officers (DPO) Data Breaches Data Protection Impact Assessments Data Security Policy Transfer of Data outside of the EEA Group Companies International Transfers Introduction Business Profile Personal & Sensitive Data Staff Awareness and GDPR Training Lawful Data Processing Consent Privacy Policies and Notices Internal Policies and Procedures Third Party Processing Consider Where Your Data Is Stored Data Retention Data Subject Access Rights Data Subject Requests Right to Data Portability Right to Erasure Right to Rectification Right to Object Data Profiling Processed for Specified, Explicit and Legitimate Purposes Adequate, Relevant and Limited Data Processing Accuracy of Data Restriction of Personal Data Processing Privacy by Design Management Of Electronic And Manual Records Data Protection Officers (DPO) Data Breaches Data Protection Impact Assessments Data Security Policy Transfer of Data outside of the EEA Group Companies International Transfers Questions Can data subjects get their personal data in a structured, commonly used and machine readable format? NoYesNot ApplicableRecommended ActionsEnsure that you have systems in place to comply with GDPR’s requirementsCompleted Not Applicable In Progress