Manifestly: A Checklist App for Teams

Confirm EU/UK customer footprint this quarter

Refresh the Article 30 records of processing

Identify lawful basis per processing activity

Review the sub-processor inventory

Audit the storefront cookie banner

Test double opt-in for EU email signups

Verify SMS consent capture for EU/UK numbers

Spot-check consent records in the ESP

Test the DSAR intake path end-to-end

Fix DSAR routing or escalate to engineering

Verify export covers Shopify, ESP, and 3PL data

Confirm the right to erasure flow purges all systems

Verify identity-verification step before fulfilling requests

Confirm TLS and encryption-at-rest across the stack

Enforce MFA on Shopify, ESP, and finance accounts

Review SCCs and UK addendum for US sub-processors

Run a transfer impact assessment for high-risk vendors

Apply retention rules to inactive customer accounts

Purge abandoned-cart and analytics PII past retention

Pseudonymize analytics warehouse exports

Confirm whether a reportable incident occurred this quarter

Notify the lead supervisory authority within 72 hours

Draft and send affected-customer communication

Tabletop the incident response plan with the team

Sign off on the quarterly compliance review

Free Checklist Templates for Gdpr