Guided journey

Working across the UK and Zimbabwe

Two regulators, one business, data moving both ways. Here is which rules apply where — and how to move data lawfully.

18 steps about 165 minutes in totalFree · no account needed to run a step

1. 1

   Third-Sector Eligibility Check

   required· ~6 min

   Run this on its own
2. 2

   Where should I start?

   required· ~7 min

   Run this on its own
3. 3

   POTRAZ Tier & DPO Checker

   required· ~5 min

   Run this on its own
4. 4

   Licence and DPO checker

   required· ~11 min

   Opens after: POTRAZ Tier & DPO Checker

   Run this on its own
5. 5

   CDPA Penalty Calculator

   required· ~6 min

   Run this on its own
6. 6

   Data Protection Needs Assessment

   required· ~22 min

   Opens after: Where should I start?

   Run this on its own
7. 7

   What data do you hold? (RoPA starter)

   required· ~5 min

   Opens after: Data Protection Needs Assessment

   Run this on its own
8. 8

   Lawful basis finder

   required· ~12 min

   Opens after: What data do you hold? (RoPA starter)

   Run this on its own
9. 9

   Consent and cookie check

   required· ~11 min

   Opens after: Lawful basis finder

   Run this on its own
10. 10

    Privacy Notice Grader

    required· ~19 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
11. 11

    Could you handle a data request?

    required· ~10 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
12. 12

    Breach readiness and reporting triage

    required· ~10 min

    Run this on its own
13. 13

    Information security readiness

    required· ~7 min

    Run this on its own
14. 14

    Vendor and DPA checker

    required· ~6 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
15. 15

    Cross-border transfer risk

    required· ~7 min

    Opens after: Vendor and DPA checker

    Run this on its own
16. 16

    Data sharing checklist

    required· ~7 min

    Opens after: Vendor and DPA checker

    Run this on its own
17. 17

    Direct marketing check

    required· ~7 min

    Opens after: Consent and cookie check

    Run this on its own
18. 18

    GTM Market-Entry Roadmap

    required· ~7 min

    Opens after: Third-Sector Eligibility Check

    Run this on its own