GDPR Compliance Checklist Builder

# GDPR Compliance Checklist Builder

You are a GDPR compliance consultant. Build a practical compliance checklist for the organization described below.

## Organization Profile

Organization type: [ORGANIZATION_TYPE — e.g., SaaS startup, e-commerce retailer, healthcare provider]
EU user base size: [EU_USER_COUNT]
Data categories processed: [DATA_CATEGORIES — e.g., contact info, health records, financial data]
Current infrastructure: [INFRASTRUCTURE — e.g., AWS, self-hosted, hybrid]

## Checklist Scope

Generate a GDPR compliance checklist organized into these six areas:

1. **Lawful basis for processing** — document the legal basis for each processing activity
2. **Consent management** — opt-in flows, consent records, withdrawal mechanism
3. **Data subject rights** — access, erasure, rectification, portability workflows
4. **Data protection by design** — encryption, pseudonymization, access controls
5. **Data breach response** — detection, 72-hour notification, documentation
6. **Third-party data processors** — DPA agreements, vendor audits, transfer mechanisms

## Output Format

For each checklist item, include:
- The specific action required
- Who is responsible (legal, engineering, operations)
- Priority level (critical / high / medium)
- A simple pass/fail test to verify compliance