Tracker
Obligations
Every requirement, its owner and its deadline in one place.
Maintain Records of Processing Activities
GDPR · Owner: DPO
in_progress
2026-09-30
Respond to Data Subject Access Requests within 30 days
GDPR · Owner: Privacy Team
open
2026-09-15
Review processor agreements annually
GDPR · Owner: Legal
open
2026-10-01
Publish transparent privacy notice
UK GDPR · Owner: Marketing
complete
2026-08-20
Implement cookie consent mechanism
ePrivacy Regulation · Owner: Product
overdue
2026-09-10
ICT risk management framework
DORA · Owner: Security
in_progress
2026-11-30