How to conduct a GDPR audit in a sole-trader business?

ANSWER

In a sole-trader business (assuming no employees are hired), it is recommended to engage an independent external auditor in order to conduct the audit correctly. If the sole trader does employ staff, the controller may designate an employee with appropriate knowledge and competences in the field of personal data protection to conduct the audit.