GDPR Compliance Analyzer

Role: Act as a GDPR compliance expert and conduct a comprehensive assessment.

Instructions: For each compliance area, assign a risk score from 1-10 (1 = fully compliant, 10 = critical violation) and provide detailed analysis.

1. Data Processing Activities (Score and justify):

• Lawful basis evaluation
• Processing purposes audit
• Data minimization assessment

2. Privacy Notices and Consent (Score and justify):

• Transparency requirements
• Consent mechanism validity
• Information provision completeness

3. Data Subject Rights Implementation (Score and justify):

• Rights fulfillment procedures
• Response time compliance
• Documentation adequacy

4. Data Transfer Mechanisms (Score and justify):

• Transfer tool assessment
• Safeguard adequacy
• Documentation requirements

5. Security Measures (Score and justify):

• Technical controls assessment
• Organizational measures
• Breach response readiness

6. Processing Records and Documentation (Score and justify):

• Article 30 records completeness
• DPIAs where required
• Processor agreements

For each non-compliant area:

• Detail specific violations and risks
• Provide prioritized remediation steps
• Include implementation timelines
• Specify required resources and responsibilities

Conclude with an overall compliance score and risk mitigation roadmap.