Global Data Privacy Compliance Assessment Engine
Choose the regulation, what you're running, and the organisation's context. The control set, references and reporting adapt to the selected law; the core controls are sector-agnostic, while sector overlays and heightened-obligation mode add extra controls only where relevant.
Compare several organisations side by side. Add the current assessment, or import saved .json files for other clients. Comparisons stay on this device only.
Re-assess the same client on different dates and add each one to the comparison — this view charts how their maturity changes over time. Add at least two assessments of one organisation to see a trend.
Adjust how heavily each control counts toward the score and how severe its gaps are. Standard = weight 1, Critical = weight 2, Mandatory = weight 3. Changes apply consistently across every client and re-assessment, on this device.
A data-driven read of the current assessment — systemic themes, quick wins versus strategic priorities, and a sequenced 30 / 60 / 90-day plan.
The published method behind every score in this engine — domains, rating scales, evidence expectations, sampling, weighting and the conformity criteria. Share it with clients so results are transparent and repeatable.
Per-domain research briefs: the statutory basis, what good looks like, the evidence to collect, and common pitfalls. Use these to brief clients, scope an audit, or justify findings.
These details appear in the header, on-screen and in every report and export. Set them once — no placeholders.