Your private working review
Your UK GDPR compliance assessment.
Work through ten areas, record evidence references and turn the gaps into a prioritised action plan.
What the 50-check assessment covers
This free UK GDPR compliance checklist covers governance, DPIAs, processing records, lawful bases, retention, international transfers, breaches, rights requests, DPO and fee decisions, and cookies and marketing. Work through every area or choose the topic you need to review.
For each control, record whether it is evidenced, in progress, a gap, unknown or not applicable. Add a reference to the supporting record. The output separates RAG findings, action owners and target dates so you can follow up the unresolved work.
Prepare the evidence before you answer
Bring your policies, processing register, supplier inventory, training records and relevant decision logs. Use record references rather than personal information. The tool does not inspect documents or independently verify your answers.
Read how evidence, uncertainty and RAG ratings are handled, use the working templates and registers, or follow the compliance audit and gap-analysis guide. Answers start in page memory; you choose whether to save a working copy or use optional storage on this device.
Assessment answers are not sent to this website. Use references such as “Policy v3” rather than client, employee or patient details. Hosting access logs and any access-gate sign-in are separate: privacy details.
Content update — 2 November 2026: clarified the page topic and resource navigation. The existing legal-source baseline is 1 November 2026.