GDPR Risk Calculator

Does your business or organisation need to think seriously about GDPR? Use this quick tool to evaluate your current position.

Indicative check

Answer eight simple questions.

Not all organisations need to comply with every part of GDPR. But almost all businesses, charities, clubs, and other organisations that collect, store, use, or share personal data need to take data protection seriously.

This calculator gives an indicative risk score and a practical next step. It is not legal advice, and it does not certify compliance.

1 Do you have customers, clients, employees or contacts within the EU or UK?

GDPR applies to organisations involved in processing personally identifiable data about people in the EU, and UK GDPR applies to personal data handled in the UK.

2 Does your business or organisation employ 250 or more staff?

Larger organisations are more likely to have formal documentation obligations and more complex data handling activity.

3 Does your business or organisation employ fewer than 250 staff?

Smaller businesses and organisations may still need to comply, especially if personal data is processed regularly or forms an important part of their work.

4 Do you collect or store any personal data?

Personal data can include names, email addresses, phone numbers, photos, addresses, customer records, employee records, supplier details, and similar information.

5 Do you collect or store any sensitive personal data?

This may include information about health, ethnicity, religion, politics, genetics, sexual orientation, criminal records, or other special category data.

6 Do you collect personal data regularly?

Regular collection can include website enquiries, customer or service-user management, email marketing, orders, bookings, payroll, HR, support, or routine administration.

7 Do you process any personal data for someone else?

Processors handle personal data on behalf of another organisation, such as clients, customers, service users, or partners.

8 Do you operate CCTV on your premises?

CCTV can involve personal data because individuals may be identifiable from recorded images.

GDPRQuick

Create and maintain your GDPR documents with GDPRQuick, the quicker way to get your documentation in order.

67 Burton Bank Lane, Stafford, England, ST17 9JJ
hello@gdprquick.com

Product

Resources

Account

Legal