# GDPR Certification Readiness Assessment Template

## Organization Information

| Field | Value |
|-------|-------|
| Organization Name | [Name] |
| Certification Scheme | [ ] Europrivacy [ ] National: ___ |
| Certification Body | [Name] |
| Assessment Date | [YYYY-MM-DD] |
| Processing Operations in Scope | [Description] |
| Role | [ ] Controller [ ] Processor [ ] Both |

## Criteria Assessment

### C1: Lawfulness, Fairness, Transparency (Art. 5(1)(a))

| ID | Criterion | Met? | Evidence | Gap |
|----|-----------|------|---------|-----|
| C1.1 | Lawful basis identified and documented | [ ] Y [ ] N | | |
| C1.2 | Privacy notices meet Art. 13-14 | [ ] Y [ ] N | | |
| C1.3 | Fair processing demonstrated | [ ] Y [ ] N | | |
| C1.4 | No hidden/deceptive processing | [ ] Y [ ] N | | |

*[Continue for C2 through C10]*

## Summary

| Category | Subcriteria | Met | Rate | Status |
|----------|------------|-----|------|--------|
| C1 Lawfulness | /4 | | % | [ ] Met [ ] Partial [ ] Gap |
| C2 Purpose Limitation | /3 | | % | [ ] Met [ ] Partial [ ] Gap |
| C3 Data Minimisation | /3 | | % | [ ] Met [ ] Partial [ ] Gap |
| C4 Accuracy | /3 | | % | [ ] Met [ ] Partial [ ] Gap |
| C5 Storage Limitation | /3 | | % | [ ] Met [ ] Partial [ ] Gap |
| C6 Integrity/Confidentiality | /6 | | % | [ ] Met [ ] Partial [ ] Gap |
| C7 Accountability | /6 | | % | [ ] Met [ ] Partial [ ] Gap |
| C8 Data Subject Rights | /6 | | % | [ ] Met [ ] Partial [ ] Gap |
| C9 International Transfers | /3 | | % | [ ] Met [ ] Partial [ ] Gap |
| C10 Breach Notification | /4 | | % | [ ] Met [ ] Partial [ ] Gap |
| **Total** | **/42** | | **%** | |

**Readiness Level**: [ ] Ready [ ] Near-Ready [ ] Not Ready

## Certification Timeline

| Phase | Estimated Duration | Target Date |
|-------|-------------------|-------------|
| Remediation | | |
| Self-Assessment | | |
| Documentation Review | | |
| On-Site Audit | | |
| Decision | | |