Answer 15 questions to assess your GDPR compliance posture. Receive a scored gap analysis with prioritised recommendations based on Croatian supervisory authority (AZOP) enforcement practice.
Free Self-Assessment⏱ Takes about 5 minutes
Question 1 of 150%
Legal Basis for ProcessingArt. 6
Does your organization identify and document a lawful basis (consent, contract, legitimate interest, etc.) for every type of personal data processing?
0 / 15 answered
Questions are weighted by AZOP enforcement severity and based on real Croatian supervisory authority decisions.
Frequently Asked Questions About GDPR Compliance
What is a GDPR readiness assessment?
A GDPR readiness assessment evaluates how well your organisation meets the requirements of the General Data Protection Regulation (EU 2016/679). It identifies gaps across key areas such as legal basis for processing, consent management, data subject rights, breach notification, and accountability — helping you prioritise remediation before a supervisory authority inspection.
Who needs to comply with GDPR?
GDPR applies to any organisation that processes personal data of individuals in the EU, regardless of where the organisation is based. This includes companies, non-profits, and public bodies. If you collect names, emails, IP addresses, or any data that identifies a person in the EU, GDPR applies to you.
What are the fines for GDPR non-compliance?
GDPR fines can reach up to €20 million or 4% of annual global turnover, whichever is higher. In Croatia, the supervisory authority AZOP has issued fines including €2.2 million to a debt collection company and €380,000 for unlawful video surveillance. Even smaller organisations face enforcement for basic violations like missing privacy notices or invalid consent.
What is AZOP and how does it enforce GDPR in Croatia?
AZOP (Agencija za zaštitu osobnih podataka) is Croatia's data protection authority, responsible for supervising GDPR compliance. AZOP conducts inspections, handles data subject complaints, and issues corrective measures including fines. Their enforcement priorities include consent management, transparency obligations, and data breach notification — all areas covered by this assessment tool.
How does this free GDPR assessment tool work?
Our GDPR assessment tool asks 15 weighted questions covering all major GDPR obligations — from legal basis and consent to breach notification and accountability. Each question is scored (Yes, Partial, No, or N/A) and weighted by enforcement risk. You receive a percentage score, compliance level rating, and prioritised gap analysis with references to real AZOP enforcement cases.