A Checklist for buyer's counsel to use when conducting a legal due diligence review of privacy and data security issues as part of a merger or acquisition (M&A) transaction. This Checklist covers considerations for determining the scope of privacy and data security due diligence for a transaction and key areas of inquiry and review.