KVKK Compliance Test
Twenty-five questions across three areas. At the end you see your overall score, where you stand area by area, and which gap should be closed first. No sign-up, no email required.
This test is for information and does not constitute legal advice. The result is a general assessment made without seeing your organisation's specific situation.
The check runs in your browser: your answers and your score are worked out on this page, and nothing is sent to our servers to complete it. Only when you start the optional commentary step are your answers sent to our server and on to the AI provider. We do not store answers in a database; we only count requests briefly, to prevent abuse.
Section 1 / 3
0%
Organisational measures
Inventory, texts, processes and record-keeping. The paper side of compliance: this is what carries the burden of proof in an audit.
- Is your personal data processing inventory current and complete?
- Is your VERBIS registration done and kept up to date as things change?
- Do you fulfil the duty to inform at every point where you collect data (website, forms, contracts, phone)?
- Is it written down which ground in article 5 of the Law each processing activity relies on?
- Do you have a retention and disposal policy, and is expired data disposed of periodically (at most every six months)?
- Do you have a defined process and records to answer data subject requests within thirty days?
- Have you signed contracts containing data processing terms with your processors (suppliers, cloud providers, agencies)?
- Where personal data is transferred abroad, is it based on an appropriate legal ground?
- Do you process special categories of personal data under a separate policy with additional safeguards?
- Do you provide regular awareness training to employees and record attendance?