Skip to content
← All pathways

Guided journey

I do the marketing

What you can legally send, to whom, on which channel — and how to do cookies and consent properly.

10 steps about 108 minutes in totalFree · no account needed to run a step

  1. 1

    Where should I start?

    required· ~7 min

    Run this on its own
  2. 2

    Data Protection Needs Assessment

    required· ~22 min

    Opens after: Where should I start?

    Run this on its own
  3. 3

    What data do you hold? (RoPA starter)

    required· ~5 min

    Opens after: Data Protection Needs Assessment

    Run this on its own
  4. 4

    Lawful basis finder

    required· ~12 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
  5. 5

    Legitimate interests assessment

    required· ~5 min

    Opens after: Lawful basis finder

    Run this on its own
  6. 6

    Consent and cookie check

    required· ~11 min

    Opens after: Lawful basis finder

    Run this on its own
  7. 7

    Privacy Notice Grader

    required· ~19 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
  8. 8

    Direct marketing check

    required· ~7 min

    Opens after: Consent and cookie check

    Run this on its own
  9. 9

    Could you handle a data request?

    required· ~10 min

    Opens after: What data do you hold? (RoPA starter)

    Run this on its own
  10. 10

    Breach readiness and reporting triage

    required· ~10 min

    Run this on its own

Save your progress

Every step is free to run right now. Start the pathway to keep the journey in one place — anything you’ve already completed is carried forward, so nothing is asked twice. No account needed: an org code works.