Resource factsheet

CNIL · TPE PME et RGPD

First steps, checklists and practical answers on data protection for small businesses.

Resource identity and purpose checked against the source on . This check does not verify all service conditions or individual data records.

Use this resource for a specific task.

IT, cybersecurity and cloud · France

Open the original resource

When it helps

Structure an initial processing inventory for a small organisation.

How to start

Start with actual processing: enquiries, customers and internal tools. Identify owners and unresolved questions, then consult resources suited to your situation.

Limits to keep in mind

Following a checklist does not guarantee full GDPR compliance.

Check before using

Three points to record with the decision.

  1. 01

    Data, purpose and recipients.

  2. 02

    Access, retention and request handling.

  3. 03

    Questions requiring specific analysis.

A method and complementary resources.

Set up proportionate audience measurement

Measurement should answer useful questions: information found, interrupted journeys or content needing correction.

Read the practical method →

Source and verification

CNIL · TPE PME et RGPD — primary source. Link checked . The checklist is editorial guidance; link availability does not guarantee completeness or suitability.

Read the editorial method · Report a correction with its source