Seraphim
セラフィム
Assess your organization's compliance with the EU General Data Protection Regulation (GDPR). Get instant feedback on Articles 5-89 requirements and actionable recommendations. GDPRコンプライアンス評価
This tool evaluates your compliance with key GDPR requirements across 7 categories: Lawful Basis, Data Subject Rights, Security, Accountability, International Transfers, Breach Notification, and DPO Requirements. Answer all 20 questions to receive your score.
Articles 6-7: Legal grounds for processing
処理の法的根拠Do you have documented lawful basis for each processing activity?
When relying on consent, is it freely given, specific, informed, and unambiguous?
Can data subjects easily withdraw consent at any time?
Articles 12-22: Individual rights management
個人の権利管理Do you provide clear privacy notices at the point of data collection?
Can you fulfill Subject Access Requests (SARs) within one month?
Do you have processes for the right to erasure ("right to be forgotten")?
Can you provide personal data in a portable format upon request?
Article 32: Technical and organizational measures
技術的・組織的対策Is personal data encrypted at rest and in transit?
Do you implement access controls and authentication for personal data systems?
Do you regularly test and evaluate security measures?
Articles 24, 30, 35: Documentation and assessments
説明責任とガバナンスDo you maintain a Record of Processing Activities (ROPA)?
Do you conduct Data Protection Impact Assessments (DPIAs) for high-risk processing?
Do you have data processing agreements with all processors?
Chapter V (Articles 44-49): Cross-border data flows
国際データ転送Do you have appropriate safeguards for transfers outside the EU/EEA?
Do you use Standard Contractual Clauses (SCCs) or other approved mechanisms?
Articles 33-34: Incident response requirements
侵害通知Do you have a documented data breach response procedure?
Can you notify supervisory authorities within 72 hours of a breach?
Do you maintain a breach register documenting all incidents?
Articles 37-39: DPO designation and responsibilities
データ保護責任者Have you assessed whether you need to appoint a DPO?
Do you provide regular data protection training to staff?
Our experts can help you implement GDPR-compliant systems, conduct DPIAs, and train your team. Serving businesses in Vietnam, Singapore, and the APAC region.
💬 Get Free ConsultationThe General Data Protection Regulation (GDPR) is the European Union's comprehensive data protection framework that came into effect on May 25, 2018. It applies to any organization that processes personal data of EU residents, regardless of where the organization is located.
GDPR establishes several fundamental principles for data processing:
Non-compliance can result in significant fines up to €20 million or 4% of annual global turnover, whichever is higher. This makes GDPR compliance essential for any business serving EU customers.
Organizations in Vietnam, Singapore, South Korea, and other APAC countries must comply with GDPR if they offer goods or services to EU residents or monitor their behavior. Our consulting services help APAC businesses implement compliant systems while aligning with local regulations like Singapore's PDPA and Vietnam's PDPD.