Our tried and tested free GDPR assessment and planning tools*

Before you start, decide if you are a data controller, data processor or both.

Data controller - UPDATED

A controller determines the purposes and means of processing personal data. For example: HR data, data about your customers.

Data processor

A processor is responsible for processing personal data on behalf of a controller. For example: if you offer a service that manages payroll for other companies.

Copy or download the Google document. When you open your new file all the interactive elements will work - but they can't be seen in our version.
Published and free to share under a CC-BY-SA 4.0 license.

*These tools are based on original guidance from the UK's Information Commissioner's Office. They should not be considered as legal advice. If you are not from the UK, please check for similar guidance from your member state regulator. 

Read more about data controllers and data processors.