This is really nice. Two notable points: 1. It is relatively short and well-categorised. I've seen scare-mongering blogposts exhaustively listing all the wors

This is really nice. Two notable points: 1. It is relatively short and well-categorised. I've seen scare-mongering blogposts exhaustively listing all the worst-case edge cases you could possibly have to consider, whereas this is a common-sense high-level overview. 2. There are links to relevant articles on each point to provide quick clarity. For example: "Your company has appointed a Data Protection Officer (DPO)" links to Article 37 which clarifies that this requirement is only for "public authority or body"; "regular and systematic monitoring of data subjects on a large scale"; or "processing on a large scale of special categories". Other similar clarifications for the other points are helpful too.