How ready is your data privacy function?
Twenty questions for a quick read, or fifty for a full programme review — across the eight domains a privacy function has to hold up: governance and roles, records and lawful basis, transparency, individual rights, retention, vendors and transfers, security, and breach response. Scored, with your weakest domain named.
A maturity benchmark for the function every other framework reduces to a single domain — from who owns privacy and how lawful basis is recorded, through transparency, rights handling and retention, to vendors, transfers, security and what actually happens in the seventy-two hours after a breach. Pick a quick scan or the full review, and take the result back to your team.