1
What personal information you hold
Consider what personal information your business collects, where it comes from, why you need it, who receives it and how long you keep it.
Work through 24 practical questions to review how your business handles personal information, identify areas that may need attention and turn your answers into clear next steps.
Consider how your business collects, uses, stores, shares and protects the personal information it handles.
Work through 24 practical questions and see which parts of your current approach may need attention, clarification or improvement.
Use the included scoring guide to identify priority areas and choose three practical actions to focus on next.
You do not need previous data protection knowledge to use the checklist. Practical questions help you review how personal information is handled across your everyday business activities.
The GDPR Readiness Checklist looks beyond whether you simply have a privacy notice. It helps you consider how personal information is collected, used, stored, shared and protected across the systems and processes your business relies on.
This is a self-assessment resource designed to support an initial review. It does not certify GDPR compliance or replace advice based on your business’s particular circumstances.
Consider what personal information your business collects, where it comes from, why you need it, who receives it and how long you keep it.
Review whether people receive clear information about what you collect, why you use it, how long you keep it and who it may be shared with.
Consider whether you understand the reasons for your processing and whether consent is requested and managed appropriately where it is needed.
Check how marketing preferences and relevant website technologies are handled, and whether you could respond properly when someone exercises their data protection rights.
Review the software, cloud services, payment providers, communications tools and devices involved in handling personal information.
Consider access controls, passwords, staff practices and whether your business knows how to respond if personal information is lost, disclosed or accessed incorrectly.
The checklist breaks the review into focused sections so you can work through it without needing previous compliance knowledge.
Once you finish, the checklist helps you interpret your answers and turn the review into a practical starting plan.
Complete the short download form to access your GDPR Readiness Checklist.
Choose the answer that most closely reflects what your business does now. It is fine if you are unsure about some areas.
Follow the included guidance to see which areas appear stronger and which may deserve a closer look.
Identify your priority areas and select three practical actions to focus on next.
Whether you work independently, run a small company or manage a growing team, the checklist is designed around the everyday ways personal information moves through a business.
Get the free GDPR Readiness Checklist to review your current approach, identify areas that may need attention and choose three practical actions to take next.