Up to €20M or 4% of global annual turnover, whichever is higher. Maintaining a Register of Processing Activities and DPIAs is central to compliance.

GDPR Compliance Checklist — free interactive tool

Legal basis identified for each processingPrivacy notices and policy in placeConsent capture and management (where relevant)

Access, rectification, erasure procedurePortability and objectionResponse deadlines (1 month) met

Register of Processing Activities (Art. 30)DPIAs for high-risk processingDPO appointed where required + processor contracts (Art. 28)

Technical and organisational security measures72h breach-notification procedureSafeguards for non-EU transfersRetention periods defined and enforced

From checklist to programme

Tick where you stand — the score shows your exposure at a glance.

In ResiPlan, each item becomes a tracked control with an owner and a due date.

Collect proof once and export an audit-ready pack for your regulator.

ResiPlan generates your Register of Processing Activities (Art. 30), manages DPIAs and breach notification.