GDPR compliance is now the responsibility of all businesses, not just large companies. Basic compliance can be achieved even with small budgets.

Data Inventory

List all personal data held in your business. Categorize customer, employee, and supplier data.

Disclosure Text

Keep a disclosure text on your website and physical locations. It should be current and understandable.

Data Processing Policy

Create a policy stating for what purpose, for how long, and how you store data.

Technical Measures

Take basic precautions such as encryption, access control, and firewalls.

Administrative Measures

Give your employees data security training. Create an authorization matrix.