A first checklist
To what extent are your customers' personal data protected? How far is your organization with the GDPR legislation? Can it be even better and what is the cost of this? Measure your degree of compliance here.
The Privacy Statement
Customers must be informed about the data that your organization stores. You let them know how this data is protected and this statement can be a sign for your organization.
IT audit according to ISO 27001