[dgellow]

The EU has pretty good documentation for the various regulations. For example for GDPR they do provide checklists:

- https://www.edpb.europa.eu/sme/be-compliant/respect-individu...

- https://www.edpb.europa.eu/sme/be-compliant/secure-personal-...

And guidance: https://www.edpb.europa.eu/system/files/2026-04/edpb-summary...