Knowing what information you hold
Consider the personal information your business collects, why you need it and where it enters your business.
4.8Top Rated Service 2026verified by TrustindexTrustindex verifies that the company has a review score above 4.5, based on reviews collected on Google over the past 12 months, qualifying it to receive the Top Rated Certificate.
Review how your business currently handles personal information, identify possible gaps and choose practical next steps with a free, beginner-friendly GDPR Readiness Check created for small businesses.
We’ve created a version specifically for your sector, with questions and examples tailored to the way your business works. Get the Aesthetics & Beauty checklist →
Consider how your business collects, uses, stores, shares and protects the personal information it handles.
Work through 24 practical questions and see which parts of your current approach may need attention, clarification or improvement.
Calculate your readiness score, identify your priority gaps and turn what you have learned into three practical actions.
You do not need to understand data protection law before you begin. The checklist uses practical questions and familiar business examples to help you review your current approach with greater clarity.
The GDPR Readiness Check helps you look beyond whether you simply have a privacy notice. You will consider how personal information is collected, used, stored, shared and protected across the everyday systems and processes in your business.
Answer 24 practical questions to build a clearer picture of how your business currently handles personal information.
Recognise areas that appear well managed and identify anything that may need checking, updating or improving.
Use your score and priority gaps to choose three realistic actions instead of trying to fix everything at once.
This is a self-assessment resource designed to support an initial review. It does not certify compliance or replace advice about your business’s particular circumstances.
Consider the personal information your business collects, why you need it and where it enters your business.
Review whether people receive clear information about what you collect, why you use it and who it may be shared with.
Think about your reasons for using personal information and whether consent is requested and managed appropriately when needed.
Check how marketing preferences are recorded and whether you could respond properly if someone asked about their information.
Review cloud systems, payment providers, email platforms, messaging apps and any phones or laptops used for work.
Consider passwords, access controls, staff awareness and whether you would know what to do after a mistake or data breach.
The checklist breaks a broad subject into smaller, focused sections so you can work through it without needing previous compliance knowledge.
Once you finish, the checklist helps you make sense of your answers and turn them into a practical starting plan.
Enter your details below and receive the downloadable PDF.
Choose the answer that most closely reflects what your business does now. You do not need to have every answer.
Follow the included scoring guidance to see where your current approach appears stronger and where gaps may remain.
Identify your priority gaps and select three practical improvements to focus on first.
Whether you work independently, run a small company or manage a growing team, the checklist is designed to help you examine the everyday ways personal information moves through your business.
Download the free GDPR Readiness Check and leave with a clearer view of your current approach, the areas that may need attention and three practical actions you can take next.
We use cookies and similar technologies to make our website work and to provide optional features such as live chat.
Some cookies are strictly necessary for the website to function. Optional cookies support tools such as live chat and will only be used if you choose to allow them.
We also use privacy-friendly, cookieless website analytics to understand aggregated website usage. This does not use cookies or track you across websites.
You can choose to accept all cookies, reject non-essential cookies, or manage your preferences.