Question 1

What does the GDPR readiness assessment cover?

Accepted Answer

Our assessment evaluates your organization across key GDPR areas: lawful basis for processing, data subject rights, data protection impact assessments, breach notification readiness, data processing agreements, and international data transfers.

Question 2

Who needs to comply with GDPR?

Accepted Answer

GDPR applies to any organization that processes personal data of individuals in the EU/EEA, regardless of where the organization is located. This includes companies offering goods or services to EU residents or monitoring their behavior.

Question 3

What are the penalties for GDPR non-compliance?

Accepted Answer

GDPR fines can reach up to 4% of annual global turnover or €20 million (whichever is higher) for the most serious infringements. Lower-tier violations carry fines up to 2% of turnover or €10 million.

Question 4

Do I need a Data Protection Officer (DPO)?

Accepted Answer

A DPO is required if you are a public authority, if your core activities require large-scale systematic monitoring of individuals, or if you process special categories of data on a large scale. Even if not required, appointing a DPO is considered best practice.

Question 5

How does GDPR affect companies outside the EU?

Accepted Answer

GDPR has extraterritorial scope. If you offer goods or services to EU residents or monitor their behavior (e.g., through website tracking), GDPR applies to you regardless of your location.

GDPR Readiness Assessment

Have you identified and documented the lawful basis for each type of personal data processing?