On April 13, 2018, the Spanish Data Protection Agency issued a document to help data controllers and processors identify and verify the minimum requirements set out by the GDPR (source document in Spanish). The document is divided into 29 blocks, including information transparency, data subjects' rights, records of processing activities, technical and organizational measures, and transfers of data to non-EU countries.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.