Skip to content
← All pathways

Guided journey

Fintech or mobile money

High-volume, high-sensitivity financial data and automated decisions, across two regulators. This is the full programme.

22 steps about 199 minutes in totalFree · no account needed to run a step

  1. 1

    Third-Sector Eligibility Check

    required· ~6 min

    Run this on its own
  2. 2

    POTRAZ Tier & DPO Checker

    required· ~5 min

    Run this on its own
  3. 3

    Licence and DPO checker

    required· ~11 min

    Opens after: POTRAZ Tier & DPO Checker

    Run this on its own
  4. 4

    What will registration cost?

    required· ~4 min

    Opens after: POTRAZ Tier & DPO Checker

    Run this on its own
  5. 5

    CDPA Penalty Calculator

    required· ~6 min

    Run this on its own
  6. 6

    Data Protection Needs Assessment

    required· ~22 min

    Run this on its own
  7. 7

    Privacy maturity scorecard

    required· ~9 min

    Opens after: Data Protection Needs Assessment

    Run this on its own
  8. 8

    What data do you hold? (RoPA starter)

    required· ~5 min

    Opens after: Data Protection Needs Assessment

    Run this on its own
  9. 9

    Lawful basis finder

    required· ~12 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
  10. 10

    Legitimate interests assessment

    required· ~5 min

    Opens after: Lawful basis finder

    Run this on its own
  11. 11

    Consent and cookie check

    required· ~11 min

    Opens after: Lawful basis finder

    Run this on its own
  12. 12

    Privacy Notice Grader

    required· ~19 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
  13. 13

    Could you handle a data request?

    required· ~10 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
  14. 14

    Breach readiness and reporting triage

    required· ~10 min

    Run this on its own
  15. 15

    Information security readiness

    required· ~7 min

    Run this on its own
  16. 16

    Do I need a DPIA?

    required· ~11 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
  17. 17

    Vendor and DPA checker

    required· ~6 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
  18. 18

    Cross-border transfer risk

    required· ~7 min

    Opens after: Vendor and DPA checker

    Run this on its own
  19. 19

    Data sharing checklist

    required· ~7 min

    Opens after: Vendor and DPA checker

    Run this on its own
  20. 20

    Direct marketing check

    required· ~7 min

    Opens after: Consent and cookie check

    Run this on its own
  21. 21

    AI and data protection risk

    required· ~10 min

    Opens after: Do I need a DPIA?

    Run this on its own
  22. 22

    Accountability re-score

    required· ~9 min

    Opens after: Privacy maturity scorecard

    Run this on its own

Save your progress

Every step is free to run right now. Start the pathway to keep the journey in one place — anything you’ve already completed is carried forward, so nothing is asked twice. No account needed: an org code works.