Independent privacy compliance assessment for SMEs

GDPR (EU Regulation 2016/679) and Privacy Code (Legislative Decree 196/2003 as modified by Legislative Decree 101/2018)

The online test dedicated to SMEs

This self-assessment toolkit was created taking into account the needs of small and medium-sized enterprises (SMEs) operating in different sectors and therefore needing specific support tailored to their organisational reality. The online tools made available by the Suite Privacy portal are easy to use and completely free.
For each self-assessment test carried out, a report is compiled proposing a list of actions to be taken to achieve higher levels of compliance with current legislation on the matter.

Privacy compliance test for SMEs
Privacy compliance assessment by sector

Managing personal information in different business sectors

Proper management of personal information is an important issue of reliability in the eyes of customers and employees and allows your organisation to improve the relationship of trust with them, avoiding occasions for conflict as much as possible.
The fact that the personal information processed is accurate, relevant, and secure, besides being a regulatory obligation, allows you to save time and money.
The different checklists for various sectors will allow you to significantly improve the overall view of the correct data protection methodologies to be used and identify the necessary actions to protect personal data and guarantee the rights of data subjects.

Checklists to evaluate critical issues in data protection

Before undertaking the assessment of the personal data protection level using the specific checklists, it is necessary to determine whether personal data are processed as a Data Controller or a Data Processor. The difference in the role held in data processing is significant between the two terms and derives from the principles underlying the GDPR.
In some cases, to correctly carry out your business tasks, you may need to process personal information simultaneously both as a Data Controller and as a Data Processor. In this case, we recommend completing both checklists.

Privacy compliance checklists

Checklist for Data Controllers

Designed to help you assess compliance with data protection legislation in your role as a data controller. It includes aspects related to data subjects' rights, managing their requests, consent, data breaches, and data protection impact assessments under the General Data Protection Regulation (GDPR).

Start the TEST for Controllers

Checklist for Data Processors

Designed as an aid in assessing compliance with current data protection legislation for the role of data processor. It includes sections relating to possessing the requirements needed to hold the role of data processor, data subjects' rights, and personal data breaches in accordance with the definition of EU Regulation 2016/679.

Start the TEST for Processors

Privacy compliance by sectors and activities

Checklists for specific sectors or activities

Each specific sector or activity has particular conditions under which personal data processing takes place. Therefore, it is extremely important to frame the real processing conditions in order to correctly carry out the necessary regulatory compliance checks.
For some sectors, the processing of natural persons' data is carried out with peace of mind, while for others it is experienced by those active in processing with deep apprehension. Objectively, it should be noted that there are activities processing personal data in such quantities or categories as to justify maximum attention even to the smallest detail.
Suite Privacy has created a series of online tools that can be used free of charge for a first assessment of the critical issues related to personal data processing on many occasions.

Information security

Assess data protection regulatory compliance in specific IT security areas, focusing on off-site and home working, removable digital media, access controls, and malware protection.

Start the IT SECTOR SECURITY TEST

Direct marketing

Assess whether your direct marketing activities (in the various operational modes: telephone, email, SMS, postal) are in line with data protection legislation. If purchasing lists of names from third parties, aspects relating to consent are included. It should be remembered that direct marketing also consists of promoting causes or ideals of various kinds as well as selling products and services.

Start the DIRECT MARKETING TEST

Records management

Allows you to evaluate the correctness of the procedures for managing archives and document collections and the risks associated with processing the personal data of data subjects. It analyses the processes of creating, storing and disposing of documents, access, monitoring, and storage with third parties.

Start the RECORDS AND DOCUMENTS TEST

Data sharing and subject access

The module is designed to help you evaluate your data sharing policies and agreements with third parties, regulatory compliance monitoring, management of shared documents, activity logging, and your protocols for handling data subject requests regarding their personal data.

Start the DATA SHARING TEST

Video surveillance (CCTV)

Personal data protection legislation also covers the use of video surveillance or CCTV systems. The checklist expressly dedicated to the sector allows you to evaluate the compliance with current legislation of CCTV systems during installation, management, and operation. The analysis includes operations to inform the public about the presence of the system and the related signage to be displayed.

Start the VIDEO SURVEILLANCE TEST

Privacy Assessment Artisans and merchants SMEs Regulatory compliance Industry commerce services Professionals

Try the service for free for a week!

Better experience for your customers, less headaches for your organisation.
Immediately available in desktop and web mode.

Register now!