---
name: gdpr-self-assessment
title: Performing GDPR Controller Self-Assessment
description: 'Guides comprehensive controller self-assessment covering GDPR Articles 5-49 with scoring methodology and reporting format. Activate when conducting internal reviews or benchmarking maturity. Keywords: self-assessment, controller assessment, compliance questionnaire, scoring.'
author: mukul975
author_url: https://github.com/mukul975/Privacy-Data-Protection-Skills/tree/main/skills/privacy/gdpr-self-assessment
license: Apache-2.0
version: 0.1.0
execution_mode: open
jurisdiction: general
practice: data-protection
language: en
---

# Performing GDPR Controller Self-Assessment

## Overview

A controller self-assessment provides structured internal review of GDPR compliance using a standardised questionnaire with scoring, enabling organisations to identify strengths, weaknesses, and maturity trends.

## Implementation Approach

### Phase 1: Assessment
1. Review current state against applicable GDPR articles.
2. Identify gaps between current practices and requirements.
3. Classify gaps by severity and regulatory risk.
4. Document the assessment with evidence references.

### Phase 2: Design
1. Design measures to address identified gaps.
2. Align measures with organisational capacity and risk appetite.
3. Obtain DPO and stakeholder review of proposed measures.
4. Create implementation timeline with milestones.

### Phase 3: Implementation
1. Execute the implementation plan according to priority.
2. Document all measures implemented with evidence.
3. Train relevant staff on new procedures and requirements.
4. Validate implementation through testing or review.

### Phase 4: Maintenance
1. Schedule periodic reviews (minimum annual).
2. Monitor for regulatory changes affecting the scope.
3. Update measures in response to audit findings or incidents.
4. Report on compliance status to the governance structure.