According to the GDPR, the obligation to perform an audit in order to comply with it is not explicitly specified in any of the articles.