This checklist will assist in-house counsel and private practitioners who are responsible for due diligence in the merger and acquisition (M&A) process. The checklist provides a review of the key privacy and data security issues that are part of M&A transactions.