GDPR: 12 Steps Illustrated

I’ve been trying to produce a visual image to capture the twelve steps to GDPR compliance.

For details of the individual steps see:

• Awareness
• Data Protection by Design
• Information Lifecycle Audit
  • Breach Notification Process [Article 29 Working Party guidance]
  • Legal Basis [Information Commissioner guidance]
    • Privacy Notices [Article 29 Working Party guidance]
    • Individual Rights Processes (inc.subject access)
    • Consent Processes (inc.children) [ICO guidance | Article 29 Working Party guidance]

Yes, only ten left, as I hope you’ve already identified your Data Protection Officer and the relevant Regulator.