GDPR — sample audit checklist
The first section rendered in full, plus the table of contents for the rest, watermarked SAMPLE. See exactly how the questions, evidence prompts and source text read before you buy. Free, no email required.
When the regulator or a major customer asks how you meet GDPR, "we have a privacy policy" is not an answer. You need to show, article by article, what you do and where the evidence lives.
Why now
GDPR has been enforceable since 2018 and supervisory-authority scrutiny only intensifies — fines now routinely run into the tens of millions. Being able to evidence compliance on demand is the difference between a routine review and an investigation.
What you get for €600
01
Every provision mapped
All 381 audit questions trace to a specific article, annex or clause of GDPR. Nothing is hand-waved: each provision is either covered by one or more questions or explicitly recorded as informational. The free Compliance Matrix proves it, line by line.
02
Built to survive scrutiny
Authored and reviewed by compliance management professionals with decades of regulatory experience, against a stated version of GDPR. Source text is reproduced verbatim per question, with suggested evidence inline — so an auditor (or a regulator) can follow every answer back to the regulation.
03
Hundreds of hours, ready Monday
The decomposition, evidence prompts and classification scheme are done. Five ready-to-use formats, delivered on payment, that drop straight into your audit process or your GRC tool — instead of months building a checklist from the raw regulation.
COMPLIANCE MATRIX — FREE, UNGATED
Every provision of GDPR, accounted for.
Before you spend a cent, download the Compliance Matrix. Every leaf of the regulation appears as a row, with its coverage status and the audit questions that map to it. It is the proof that this checklist is complete — and the artefact your own auditor can use to check the checker.
381
Audit questions
100%
Provisions accounted for
5
Artefact formats
12
Months of updates
Authored and reviewed by compliance management professionals. Reviewed against v2016-05-04; each Compliance Matrix states the exact version it was verified against.
See a sample first
Pricing
One regulation, one organisation, 12 months of updates included. A single invoice — not a subscription, nothing auto-debited.
Every amendment to GDPR within your 12-month window is re-rendered against the new version and emailed to you automatically. When the 12 months end you keep every artefact you've downloaded — you simply stop receiving new amendments unless you renew.
| Licence | Price | What it covers |
|---|---|---|
| Single organisation | €600 | Use across your organisation, 12 months of updates, all five artefact formats plus the Compliance Matrix. |
Licensing for a group of separate legal entities? Contact us for group licensing.
What you'll receive
Five formats of the same reviewed content, covering the full GDPR, delivered by email the moment payment clears. Every amendment during your 12-month window is re-rendered and emailed automatically. Everything you download is yours to keep.
- 01 Audit Checklist The auditor's working document. Per-question blocks with a compliance state, four-state classification and finding-level boxes, the regulation source text verbatim plus suggested evidence inline, and a management-system reference field. Print-ready. PDF
- 02 Audit Checklist The same content as plain text. Diff it against last year's edition, drop it into Confluence / Notion / your internal wiki via pandoc, or feed it to internal review tooling. MD
- 03 Audit Workbook Multi-sheet workbook mirroring the PDF: cover, per-section sheets with dropdowns and conditional formatting, Findings Log, Cross-Reference Register and Dashboard. XLSX
- 04 Data Bank A flat one-row-per-question table. The universal format for upload into third-party audit and GRC software, or your own in-house tooling. Opens directly in Excel. CSV
- 05 Question Bank A lean structured schema: citation, regulatory hook, question text, classification options, severity, applicability. A stable XSD contract for structured ingestion into third-party audit and GRC software. XML