This article covers a general checklist for the implementation and compliance of the General Data Protection Regulation (GDPR). Under GDPR, personal data may be considered as being collected from the data subject, where: A data subject consciously provides personal data to a controller (e.g., when completing an online form) -or-