New project: three GDPR gates

Complete plan

A new CRM, an app, a new supplier: three moments where personal data needs a check, and the questions to ask at each. Privacy by design, in practice.

  • 2 min
  • 3-question check
  • English · Français
  • Attestation

You will be able to

  • Involve the DPO at the start of a project that uses personal data
  • Check a supplier: processor contract, hosting, access and transfers outside the European Union
  • Check before go-live: record, information, retention, people's requests, need for a DPIA

The module

2 min
  1. New project: three GDPR gates 2 min
  2. Knowledge check

    3 questions, pass mark 80 %. Explanations after each answer; you can try again.

  3. Attestation

    One per person, with the date, the score and the frameworks covered — anyone can check it online with its code.

Sources
  • RGPD, art. 25 (protection dès la conception) et 38(1) (DPO associé en temps utile)
  • RGPD, art. 28 (sous-traitant) et 44 à 46 (transferts hors de l'Union européenne)

Version 1 · updated October 5, 2026

On the same topics

Micro-module Free

MFA fatigue: the attack that counts on you being tired

  • 2 min
  • EN · FR
NIS2 Art. 21(2)(g)ISO/IEC 27001 A.6.3
See the content →
Micro-module Free

Phishing: 3 seconds not to click

A phishing email is won or lost in 3 seconds: spot the warning signs, apply the stop – check – report reflex, and know what to do if you have already clicked.

  • 2 min
  • EN · FR
NIS2 Art. 21(2)(g)ISO/IEC 27001 A.6.3
See the content →
Micro-module Essentials plan

One password, every door

One reused password opens every account once it leaks. See how attackers do it, then switch to a password manager, passkeys and MFA.

  • 2 min
  • EN · FR
NIS2 Art. 21(2)(g), (j)ISO/IEC 27001 A.5.17, A.6.3
See the content →