Skip to content
← All pathways

Guided journey

An established small business

Real customer and staff records, and nobody assigned to look after them. Here is the full path to being licensed and defensible.

17 steps about 153 minutes in totalFree · no account needed to run a step

  1. 1

    POTRAZ Tier & DPO Checker

    required· ~5 min

    Run this on its own
  2. 2

    Licence and DPO checker

    required· ~11 min

    Opens after: POTRAZ Tier & DPO Checker

    Run this on its own
  3. 3

    What will registration cost?

    required· ~4 min

    Opens after: POTRAZ Tier & DPO Checker

    Run this on its own
  4. 4

    CDPA Penalty Calculator

    required· ~6 min

    Run this on its own
  5. 5

    Data Protection Needs Assessment

    required· ~22 min

    Run this on its own
  6. 6

    Privacy maturity scorecard

    required· ~9 min

    Opens after: Data Protection Needs Assessment

    Run this on its own
  7. 7

    What data do you hold? (RoPA starter)

    required· ~5 min

    Opens after: Data Protection Needs Assessment

    Run this on its own
  8. 8

    Retention and records readiness

    required· ~6 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
  9. 9

    Lawful basis finder

    required· ~12 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
  10. 10

    Consent and cookie check

    required· ~11 min

    Opens after: Lawful basis finder

    Run this on its own
  11. 11

    Privacy Notice Grader

    required· ~19 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
  12. 12

    Could you handle a data request?

    required· ~10 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
  13. 13

    Breach readiness and reporting triage

    required· ~10 min

    Run this on its own
  14. 14

    Information security readiness

    required· ~7 min

    Run this on its own
  15. 15

    Vendor and DPA checker

    required· ~6 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
  16. 16

    Training and privacy culture

    required· ~6 min

    Opens after: Privacy maturity scorecard

    Run this on its own
  17. 17

    Privacy Literacy — Role & Industry

    required· ~4 min

    Opens after: Training and privacy culture

    Run this on its own

Save your progress

Every step is free to run right now. Start the pathway to keep the journey in one place — anything you’ve already completed is carried forward, so nothing is asked twice. No account needed: an org code works.