Training, exams and certification
Training, exams and certification
Seventy requirements that cover the GDPR from principles and accountability to breaches, transfers and special situations, each linked to the Annex A controls of the new standalone ISO/IEC 27701:2025.
By Claudio Restaino ·
Principles and accountability, governance and DPO, records of processing, lawfulness and consent, transparency, data subject rights and automated decisions, privacy by design, processors and contracts, security of processing, breach management, DPIA, international transfers, special situations (employees, children, marketing, AI) and continual improvement. EDPB guidelines and the main CJEU judgments are referenced where they shape the requirement.
Regulatory status: Snapshot of 31 October 2026. ISO/IEC 27701:2025 was published on 14 October 2025 with a three-year transition; Regulation (EU) 2025/2518 on cross-border enforcement applies from 2 April 2027; the Digital Omnibus amendments to the GDPR are still a proposal and are flagged as such.
Nothing is sent to our servers: the assessment runs entirely in the browser, and you can download a save file to resume later or share with colleagues. No account is needed.
Compliance, legal, IT security and risk functions, DPOs, CISOs, consultants and auditors who need a quick, structured picture of where an organisation stands before planning a compliance programme or a certification.
The assessment is part of the GoToCertify Compliance Self-Assessment Hub, which also offers free assessments for the EU AI Act, the GDPR, NIS2 and DORA.
The 2025 edition: Table A.1 (PII controllers), A.2 (PII processors) and A.3 (information security controls), plus clauses 4-10. All 78 controls are covered by at least one requirement.
Yes. The profile questions switch processor-only and controller-only requirements on or off, so the result reflects your actual role.
No. National specifics such as Article 88 labour rules, age thresholds or ePrivacy transposition are out of scope and noted as such.
Free, no registration, PDF report included.
Start the GDPR self-assessment
BITIL.COM is an ATO (Accredited Training Organization) and an AEO (Approved Examination Organization) of PeopleCert. PRINCE2® and PRINCE2 Agile® are registered trade marks of PeopleCert.
