GDPR Compliance Assessment for Therapy Practices

This tool will help you assess your therapy practice's compliance with GDPR data protection requirements and provide actionable recommendations for improvement.

Client Consent Management

How do you currently collect client consent for data processing?

Written consent forms with clear explanations
Verbal consent only
Digital consent through secure platforms
No formal consent process
Mixed approach depending on situation

Which elements are included in your consent process? (Select all that apply)

Clear explanation of data processing purposes

Information about data retention periods

Client's right to withdraw consent

Contact details for data protection queries

Information about data sharing with third parties

Explanation of client rights under GDPR

Describe Your Current Consent Procedures

Data Storage and Security

Primary Data Storage Method

What security measures do you have in place?

Password protection and encryption
Regular security updates and patches
Access controls and user permissions
Backup and recovery procedures
Basic password protection only
No specific security measures

Describe Your Data Storage and Security Procedures

Data Breach Response

Do you have a data breach notification plan?

Yes, comprehensive written plan with clear procedures
Yes, basic plan covering essential elements
Partial plan, needs improvement
No formal plan in place

Which elements are included in your breach response plan? (Select all that apply)

Immediate containment procedures

Risk assessment protocols

Notification to supervisory authority within 72 hours

Client notification procedures

Documentation and record-keeping requirements

Staff training on breach response

Describe Your Data Breach Response Procedures

Client Rights and Data Management

How well do you handle client rights requests (access, rectification, erasure)?

With whom do you share client data? (Select all that apply)

Describe Your Data Management and Client Rights Procedures

GDPR Compliance Assessment for Therapy Practices

Client Consent Management

Data Storage and Security

Data Breach Response

Client Rights and Data Management

Staff Training and Documentation