Skip to content

GDPR Accountability Snapshot

Answer 10 quick questions and see where your business stands on GDPR accountability — your role, your lawful basis per activity, and the records you should be holding.

This free snapshot reads your processing role, maps each activity you run to its lawful basis under Article 6, flags where a risk assessment may be needed, and shows you one fully worked sample Records of Processing Activities entry. It is an automated, indicative preview — a fast way to see what GDPR asks of a company like yours before you commit to the full documentation set.

Build your snapshot

The EU/EEA country where your central administration sits. Pick "Outside the EU/EEA" if neither applies.
Whose personal data do you mainly handle?
This sets whether you act as a controller, a processor, or both.
Which of these does your business do?Tick every activity that applies. We map each one to its lawful basis and the records it needs.

People & HR

Operations & customers

Security & technology

Pick at least one activity to continue.
Do you handle any special-category data?
Health, biometric, ethnicity, trade-union, religion, sex life or political-opinion data — even occasionally (e.g. sick notes).
Do you send personal data outside the EU/EEA?
For example, a US-hosted CRM, email or cloud tool, or a supplier outside the EU/EEA.
We thread this into your sample record. Legal name only — please don’t add anything else.

Data minimisation: we ask for the legal name only, nothing more. It is used to personalise your sample record and email.

See your full snapshot

Your role read, your activity map and a worked sample record — emailed to you, with the method we use. No charge.

Please finish the questions above first.

How this snapshot is built

We start from your processing role, then map every activity you tick to its lawful basis under Article 6 using the same catalogue our full GDPR engine uses. We flag where a Data Protection Impact Assessment is recommended or likely, read your international-transfer position, and list the records each activity needs under Article 30. Finally we render one fully worked Records of Processing Activities entry for the activity you choose, with your company name threaded in. It is deterministic — the same answers always produce the same snapshot — and it deliberately stays an indicative preview, not a finished compliance file.

What this snapshot does not do

  • It is not legal advice and not a certification of your compliance.
  • It does not validate your individual situation — only the underlying method is lawyer-validated.
  • It gives you one sample record, not your full documentation set or editable files.
  • Nationally-variable details (retention periods, named authorities) are shown as placeholders.

Frequently asked questions

What is the GDPR Accountability Snapshot?+

It is a free, automated preview of your GDPR accountability position. You answer ten short questions and it shows your processing role, your lawful basis for each activity under Article 6, where a risk assessment may be needed, and one fully worked Records of Processing Activities entry. It is an indicative preview, not legal advice.

Is this legal advice?+

No. The snapshot is an automated, indicative preview. The methodology behind it was validated by a lawyer, but that validates the method — not your individual situation. For a binding view on your specific case you should take qualified advice.

What is a Records of Processing Activities entry?+

Article 30 of the GDPR requires most organisations to keep records of their processing activities — what data they hold, why, who receives it, how long they keep it and what safeguards apply. The snapshot builds one such record for the activity you choose, so you can see exactly what one looks like.

Do I have to give my email?+

You can see the first page — where your business stands — without an email. To unlock your full activity map and the worked sample record, and to get them in writing, you share an email and agree to receive them.

What do I get if I buy the complete set?+

The complete GDPR Accountability set covers every activity you run, not just one — the full records, your privacy notices and assessments, and editable versions you can adapt and hand to your team, filled in for your country.

Related reading

easyAI · Last updated 21 June 2026