Embed Form

Do you obtain explicit consent before collecting personal data? (Clear, affirmative action required from users)

Yes
No

Do you provide clear information about what data is being collected? (Transparent privacy notices)

Yes
No

Do you allow users to withdraw consent easily? (Simple opt-out mechanisms)

Yes
No

Do you have processes for handling consent for minors? (Parental consent verification)

Yes
No

Do you document all consent records? (Audit trail of consent decisions)

Yes
No

Do you regularly review and update consent mechanisms? (Periodic assessment and improvement)

Yes
No

Do you provide opt-out options for marketing communications? (Unsubscribe mechanisms)

Yes
No

Do you encrypt personal data both in transit and at rest? (End-to-end encryption protection)

Yes
No

Do you have access controls limiting who can view personal data? (Role-based permissions)

Yes
No

Do you regularly update security software and systems? (Patch management procedures)

Yes
No

Do you conduct regular security audits and assessments? (Vulnerability testing and reviews)

Yes
No

Do you have secure backup and recovery procedures? (Data protection and restoration plans)

Yes
No

Do you use multi-factor authentication for data access? (Additional security layers)

Yes
No

Do you provide users the right to access their personal data? (Data portability requests)

Yes
No

Do you allow users to correct inaccurate personal data? (Data rectification processes)

Yes
No

Do you enable users to delete their personal data upon request? (Right to erasure/be forgotten)

Yes
No

Do you allow users to export their data in a portable format? (Machine-readable formats)

Yes
No

Do you have processes for handling data subject requests within required timeframes? (30-day response periods)

Yes
No

Do you verify user identity before granting access to personal data? (Identity confirmation procedures)

Yes
No

Do you have procedures to detect data breaches promptly? (Monitoring and alert systems)

Yes
No

Do you notify relevant authorities within 72 hours of breach discovery? (Regulatory compliance)

Yes
No

Do you notify affected individuals when required by law? (User breach notifications)

Yes
No

Do you document all data breaches and response actions? (Incident logging and records)

Yes
No

Do you have incident response plans and trained personnel? (Emergency response procedures)

Yes
No

Do you conduct post-breach reviews to improve security? (Lessons learned and improvements)

Yes
No

Data Compliance Scorecard

Data Collection Consent (20% weight)

Data Storage Security (30% weight)

User Access Controls (20% weight)

Breach Notification Processes (30% weight)