GDPR & Cybersecurity - Checklist 2026

What is this?

An interactive checklist covering both GDPR compliance and technical cyber security. Go through each point in the browser, mark when it is handled and export a clear decision basis before launch - regardless of the size of the app.

What is included?

Part 1 – GDPR: Data Protection & personal data

• Inventory – What categories of personal data are collected and why?
• Legal basis – Consent, agreement, legal obligation or legitimate interest?
• Transparency – Privacy policy, cookie consent and information to users
• Data subjects' rights - Access, erasure, portability and objections
• Storage & deletion – Retention times, automatic deletion and management of backups
• Third parties – Data processing agreement and transfer outside the EU/EEA
• Incident Management – Routine to detect and report to IMY within 72 hours

Part 2 – Cyber Security: Technical Measures

• Authentication & access control – Strong authentication, MFA and the principle of least privilege
• Encryption – Data in transit (HTTPS/TLS) and at rest
• Input Validation – SQL injection, XSS and similar attacks
• Logging & monitoring – What is logged and for how long
• Dependencies & library – Update routines and vulnerability scanning

Who is it for?

Founders and teams who build apps with Base44, Cursor or similar tools and need to ensure they meet the legal requirements before launch.

Technical format

Interactive HTML file. Your answers are saved locally in the browser - no data leaves your device.