easyGDPR

We make implementing General Data Protection Regulation Easy

GDPR Self Assessment

Approaching GDPR can be confusing and expensive. Our free GDPR self-assessment gives you an overall understanding of GDPR and gives you an overview on where you are regarding GDPR.
The advanced versions of GDPR self-assessment guides you through the whole process. It helps you understand the impact of GDPR on your company. It will point out risks and ways to handle them. The system will also give you an audit trail to prove your sincere dedication to do the things right.

GDPR self-assessment gets you prepared before you book experts. This is a massive cut on GDPR cost.

To handle GDPR successfully, you need to know where you are and what you need to do.
You can hire experts to handle the whole process. Our expert network helps you find the proper people. However having experts handling everything is quite expensive.
We want to empower you through a self-assessment with our easyGDPR self-assessment tool. The self-assessment tool will guide you through several questionnaires. Your answers are automatically evaluated. Based on your answers the system triggers more questionnaires till a clear picture on your current status is achieved.
Our GDPR Assessment Engine evaluates your answers and gives you immediate feedback on risks and suggested tasks. The result is shown in an easy to understand dashboard. This will immediately help you see risks and choose what to do to be compliant.
The basic questionnaires are free. This will give you a bird’s-eye view on the impact of GDPR for your organisation and the areas you need to pay attention to.
You can upgrade to one of the paid versions without losing the data you already entered.
Some questions may be too technical/specific/… for you to answer. EasyGDPR self-assessment allows you to assign sub questionnaires to subject matter experts as needed. This can be your network administrator, software vendor, your lawyer or a GDPR expert.
This makes the process very streamlined and easy.
Self-assessment cannot replace experts. But it will make you well prepared so you can use the expert time very effectively. You don’t need to pay experts to take you through steps you CAN do by yourself.
For small companies the result of the self-assessment may be all you need to be prepared.
GDPR requires you to prove that you did what is feasable to be compliant.( GDPR Article Paragraph 2)
easyGDPR self-assessment also gives you an audit trail about all considerations on your way to become compliant. We guide you through all areas you should consider. This is proof to the authority that you did pay attention to the law and did whatever you can to fulfil the law.
 

How does GDPR self-assessment work?

Currently the self-assessment tool is in development. Beta phase will start soon (you are weclome to register at the end of the page).
Starting a  new assessment, you can choose from several sets of questionnaires. We work on specialised sets for different types of organisations and industries.
The initial questionnaire will query some base data (what major data sources do you have, what kind of operations are done, …) to give you a baseline for the rest of the assessment.
 
As soon as this is saved you see a dashboard about your GDPR status:
 
The dashboard is 100% customizable and derived from the used set of questionnaires.
The specialty of our system is that we automatically derive conclusions from your answers and generate data entities guiding you through the process.
The original checklist identifies data sources (among other entities).  You see them on the top of our demo dashboard.
For each data source you need to clear many details like
  • Do you have a permission for processing?
  • Is the data backed up properly?
  • What is the purpose of this data?
  • Is the data only used accordingly to this purpose?
  • What is the retention policy?
  • Is the data trasnferred outiside of EU?
  • …..
All the icons you see in the data sources table refer to a sub checklist validating different aspects of the data source. The color will show you when you haven’t done the questionaire yet, when there were problems or when everything is well.
The card on the righthand side shows details of the selected item. In the screenshot you see the details for mailchimp.
A sub checklist can be triggered by clicking on the icons or from the data card. It could look like this:
 
For large companies the system can make documenting GDPR progress easy. We do not believe self-assessment can replace experts. But it can make sure that experts do expert tasks instead of basic explanations of GDPR.
Using easyGDPR self-assessment will help you understand what is needed for GDPR and where you are. This may give you everything you need. IF you need an expert after using our tool –  you will be perfectly prepared to have a conversation on eye level.  Even if you need an expert, doing a self-assessment first may safe you 70%-90% of assessment cost.
A basic version of the product will be available for free. It will give you a basic introduction on GDPR and help you identify your high level status.
A light version will allow small companies to go through a full assessment. The goal is to help them understand where they are and where risks are. With this infromation they can communicate properly with real experts who will help them make the best decisions around GDPR. For small companies the self-assessment light result may be enough. For most companies, I assume a real human expert will stil be needed to help them fully understand the implications. The intended price for this service is about 500 EUR per year for the light version of the product.
The standard edition has a more complete set of questinnaires and more options to report and work with multiple sites and have a team work on the assessment. Pricing will be around 2000 EUR  per year (+ additional users, …) we are still validating the market to finetune pricing.
The professional edition will allow full customisation of all questionnaires to let the system work exactly like they want to handle GDPR including customisable reporting. Price starting 10.000 EUR.
The enterprise edition is completely customisable and can be hosted on premise.