EU GDPR pack for accountancy practices
The data protection records, notices and procedures an accountancy practice in the EU needs, with deadlines worked out for breaches and access requests.
EU practicesWhat the GDPR expects of your firmDocument in the pack
A record of processingArticle 30
✓Processing recordFilled in for a typical practice
Telling clients and staff how you use their dataArticles 13 and 14
✓Client and staff privacy notices
Keeping data no longer than neededArticle 5
✓Retention scheduleYour national periods as inputs
Reporting breaches within 72 hoursArticle 33
✓Breach procedure and logDeadline worked out
Answering access requests within one monthArticle 15
✓Access request procedure and log
Assessing high-risk processingArticle 35
✓Impact assessment
Contracts with software providersArticle 28
✓Processor checklist
Who it's for
Accountancy practices in EU member states.
Last checked
Checked against the GDPR in October 2026.
