GDPR Compliance Self-Assessment
Walk through core GDPR obligations.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
Run a self-assessment against core GDPR obligations. This is a screening aid and not legal advice. Organization: [ORGANIZATION_DESCRIPTION]. Where we operate and whose data we process: [SCOPE]. Our processing activities: [PROCESSING_ACTIVITIES]. What we already have in place: [CURRENT_MEASURES]. Score each area from 0 (nothing), 1 (informal), 2 (partly documented), 3 (documented and operating), with evidence from my description. If I gave no information, write "unknown" and ask a question. 1. Lawful basis identified for each activity. 2. Records of processing. 3. Privacy notices. 4. Consent handling, where used. 5. Data subject rights process (access, deletion, correction) with response times. 6. Data minimization and retention. 7. Security measures and breach response (a notification process that can meet the deadline set by the regulator that applies to me). 8. Processor contracts. 9. International transfers. 10. Data protection impact assessments. 11. Roles: whether a data protection officer is needed. 12. Staff training. Present as a table with a total out of 36. Rank the five most urgent gaps, give a 90-day action plan with owners, and list documents to create. Label every legal statement [VERIFY with a qualified adviser]. First say whether GDPR (or a similar law) may apply to my situation in [JURISDICTION], and what to confirm. Treat all output as a draft for discussion, not legal advice. Have a qualified lawyer or privacy specialist who knows [JURISDICTION] verify it before you rely on it.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.