DownloadChecklistsPDF · EN2 pages
GDPR checklist for document processing
Two pages to fill in: legal basis, retention periods, access, data processing agreements, data subject rights and data breaches.
The file is available in English and German; you download the version in the language of this page. Free, no registration.
Trusted by leading companies worldwide
OEM PARTNERSHIP
Hardware giants choose PaperOffice exclusively.
Sole official DMS partner for QNAP: Classic app, AI BYOS.
More
Sole official DMS partner for ASUSTOR: Classic app, AI BYOS.
MoreWhat's inside
- Legal basis and purpose
- Retention and deletion periods
- Deletion concept
- Access and roles
- Logging
- Redaction of personal data
- Processing on your behalf (DPA)
- Technical and organizational measures (TOMs)
- Data location and transfers
- Data subject rights
- Data breaches
Who it is for
Data protection officers, management and IT who want to check whether their document processing meets the GDPR requirements – to fill in and tick off.
Key facts
- Eleven checkpoints with article references to the GDPR
- From legal basis and deletion periods to data subject rights and data breaches
- For every point the PaperOffice AI feature that supports it
- Two pages to fill in; no substitute for legal advice
Questions and answers
Frequently asked questions about this download
Which topics does the checklist cover?
Legal basis and purpose, retention and deletion periods, deletion concept, access and roles, logging, redaction of personal data, processing on your behalf, technical and organizational measures, data location and transfers, data subject rights and data breaches.
Does the checklist replace data protection advice?
No. It structures the review and names the GDPR articles. Whether a process meets the requirements depends on the implementation in your company and should be settled with your data protection officer or legal counsel.
Where is data stored with PaperOffice AI?
In the company’s own PaperOffice DataCenter in Navarra, Spain, that is in the European Union. The core pipeline runs on its own infrastructure, without requiring US public-cloud services.
Need personalized advice?
Our experts are happy to help you choose the right solution.
Request consultation