This checklist provides guidance to in-house counsel and risk and compliance teams, or private practitioners assisting their clients, on auditing an organisation’s compliance with Regulation (EU) 2016/679 – General Data Protection Regulation 2016/679 (EU GDPR).