Dear All!
The Gibraltar Regulatory Authority published a GDPR guidance for SMEs on its website. In the Annex of the guidance there is a detailed questionnaire for SMEs to assess their compliance with the GDPR. Maybe we can get some ideas.
https://www.gra.gi/dataprotectiong/dpr-7-guidance-for-smes
Best,
Renáta