Guided journey

Charity or NGO

Donor data and beneficiary data are two different problems. Here is how to satisfy funders and protect the people you serve, cheaply.

19 steps about 175 minutes in totalFree · no account needed to run a step

1. 1

   POTRAZ Tier & DPO Checker

   required· ~5 min

   Run this on its own
2. 2

   Licence and DPO checker

   required· ~11 min

   Opens after: POTRAZ Tier & DPO Checker

   Run this on its own
3. 3

   What will registration cost?

   required· ~4 min

   Opens after: POTRAZ Tier & DPO Checker

   Run this on its own
4. 4

   Data Protection Needs Assessment

   required· ~22 min

   Run this on its own
5. 5

   Privacy maturity scorecard

   required· ~9 min

   Opens after: Data Protection Needs Assessment

   Run this on its own
6. 6

   What data do you hold? (RoPA starter)

   required· ~5 min

   Opens after: Data Protection Needs Assessment

   Run this on its own
7. 7

   Lawful basis finder

   required· ~12 min

   Opens after: What data do you hold? (RoPA starter)

   Run this on its own
8. 8

   Legitimate interests assessment

   required· ~5 min

   Opens after: Lawful basis finder

   Run this on its own
9. 9

   Consent and cookie check

   required· ~11 min

   Opens after: Lawful basis finder

   Run this on its own
10. 10

    Children and sensitive data screener

    required· ~12 min

    Opens after: Lawful basis finder

    Run this on its own
11. 11

    Privacy Notice Grader

    required· ~19 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
12. 12

    Could you handle a data request?

    required· ~10 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
13. 13

    Breach readiness and reporting triage

    required· ~10 min

    Run this on its own
14. 14

    Information security readiness

    required· ~7 min

    Run this on its own
15. 15

    Vendor and DPA checker

    required· ~6 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
16. 16

    Data sharing checklist

    required· ~7 min

    Opens after: Vendor and DPA checker

    Run this on its own
17. 17

    Cross-border transfer risk

    required· ~7 min

    Opens after: Vendor and DPA checker

    Run this on its own
18. 18

    Direct marketing check

    required· ~7 min

    Opens after: Consent and cookie check

    Run this on its own
19. 19

    Training and privacy culture

    required· ~6 min

    Opens after: Privacy maturity scorecard

    Run this on its own