Skip to content
← All pathways

Guided journey

App, SaaS or online shop

Privacy is a build task and a sales asset. Here is the order that gets you launched and through procurement.

19 steps about 204 minutes in totalFree · no account needed to run a step

  1. 1

    Where should I start?

    required· ~7 min

    Run this on its own
  2. 2

    Third-Sector Eligibility Check

    required· ~6 min

    Run this on its own
  3. 3

    POTRAZ Tier & DPO Checker

    required· ~5 min

    Run this on its own
  4. 4

    Data Protection Needs Assessment

    required· ~22 min

    Opens after: Where should I start?

    Run this on its own
  5. 5

    What data do you hold? (RoPA starter)

    required· ~5 min

    Opens after: Data Protection Needs Assessment

    Run this on its own
  6. 6

    Lawful basis finder

    required· ~12 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
  7. 7

    Consent and cookie check

    required· ~11 min

    Opens after: Lawful basis finder

    Run this on its own
  8. 8

    Privacy Notice Grader

    required· ~19 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
  9. 9

    Generate a Privacy Policy Checklist

    required· ~21 min

    Opens after: Privacy Notice Grader

    Run this on its own
  10. 10

    Could you handle a data request?

    required· ~10 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
  11. 11

    Breach readiness and reporting triage

    required· ~10 min

    Run this on its own
  12. 12

    Information security readiness

    required· ~7 min

    Run this on its own
  13. 13

    Do I need a DPIA?

    required· ~11 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
  14. 14

    Vendor and DPA checker

    required· ~6 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
  15. 15

    Cross-border transfer risk

    required· ~7 min

    Opens after: Vendor and DPA checker

    Run this on its own
  16. 16

    Direct marketing check

    required· ~7 min

    Opens after: Consent and cookie check

    Run this on its own
  17. 17

    App Builder — Privacy & Security Checklist

    required· ~22 min

    Opens after: Data Protection Needs Assessment

    Run this on its own
  18. 18

    Shadow AI Discovery

    required· ~10 min

    Run this on its own
  19. 19

    AI readiness mini-check

    required· ~6 min

    Run this on its own

Save your progress

Every step is free to run right now. Start the pathway to keep the journey in one place — anything you’ve already completed is carried forward, so nothing is asked twice. No account needed: an org code works.