Research & Planning
Review more in depth guidance from trusted sources and plan out what you will need to do. One way which is required if you collect risky data or have over 250 employees, but optional otherwise, is to complete this assessment. Although likely optional for a small community it can still help you to plan out what you might need to do next.
Create Terms of Service
This isn’t 100% GDPR related but it goes along with it. Plus, this is a checklist for small communities such as Internet forums where Terms are very necessary. So, this is your reminder to create this documentation as well. This is different from data privacy. It’s about the rules of your community such as, no profanity allowed.