Introduction Business Profile Personal & Sensitive Data Staff Awareness and GDPR Training Lawful Data Processing Consent Privacy Policies and Notices Internal Policies and Procedures Third Party Processing Consider Where Your Data Is Stored Data Retention Data Subject Access Rights Data Subject Requests Right to Data Portability Right to Erasure Right to Rectification Right to Object Data Profiling Processed for Specified, Explicit and Legitimate Purposes Adequate, Relevant and Limited Data Processing Accuracy of Data Restriction of Personal Data Processing Privacy by Design Management Of Electronic And Manual Records Data Protection Officers (DPO) Data Breaches Data Protection Impact Assessments Data Security Policy Transfer of Data outside of the EEA Group Companies International Transfers Introduction Business Profile Personal & Sensitive Data Staff Awareness and GDPR Training Lawful Data Processing Consent Privacy Policies and Notices Internal Policies and Procedures Third Party Processing Consider Where Your Data Is Stored Data Retention Data Subject Access Rights Data Subject Requests Right to Data Portability Right to Erasure Right to Rectification Right to Object Data Profiling Processed for Specified, Explicit and Legitimate Purposes Adequate, Relevant and Limited Data Processing Accuracy of Data Restriction of Personal Data Processing Privacy by Design Management Of Electronic And Manual Records Data Protection Officers (DPO) Data Breaches Data Protection Impact Assessments Data Security Policy Transfer of Data outside of the EEA Group Companies International Transfers Questions Are all the stipulated terms included in processor contracts? NoYesNot ApplicableAre there controller/processor contracts containing all the stipulated terms? NoYesNot Applicable Recommended Actions You need to put in place contracts with the companies that store your data.Completed Not Applicable In Progress