Skip to main content
FortressSphere
Back to frameworks

UK GDPR & Data Protection Act 2018 Self-Audit

A guided self-assessment against UK GDPR, as retained under the European Union (Withdrawal) Act 2018, given effect by the Data Protection Act 2018, and substantially amended by the Data (Use and Access) Act 2025 (DUAA) including a mandatory complaints handling requirement that only took effect 19 June 2026. Built for SMEs with no in-house compliance team. Takes about 20-25 minutes given the breadth of this framework.

Sections

10

Questions

46

Some appear only when an earlier answer makes them relevant

Not included in your plan

Starting this audit requires the UK GDPR Framework Access add-on. Sign in and subscribe to continue.
View pricing

What it covers (10)

  1. 1. Core Principles & Lawful Basis9 questions
  2. 2. Transparency & Privacy Notices3 questions
  3. 3. Data Subject Rights & Complaints Handling6 questions
  4. 4. Data Protection Officer & Accountability7 questions
  5. 5. Data Protection Impact Assessments & Automated Decision-Making4 questions
  6. 6. International Data Transfers5 questions
  7. 7. Security & Breach Notification4 questions
  8. 8. Children's Data & Special Categories3 questions
  9. 9. Cookies & PECR1 question
  10. 10. Direct Marketing4 questions