Form banner image

Please answer these simple 10 questions.


This survey will help determine if your security and governance would improve with YouAttest.

Personal data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’).
Processing shall be lawful only if and to the extent that at least one of the lawful bases listed in Article 6 applies, such as consent or necessity for a contract.
The controller shall implement appropriate technical and organisational measures to ensure and to be able to demonstrate that processing is performed in accordance with this Regulation.
The controller shall implement appropriate technical and organisational measures for ensuring that, by default, only personal data which are necessary for each specific purpose of the processing are processed.
Where processing is to be carried out on behalf of a controller, the controller shall use only processors providing sufficient guarantees to implement appropriate technical and organizational measures.
The controller and processor shall implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk.
Where a type of processing is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall, prior to the processing, carry out an assessment of the impact of the envisaged processing operations.
The data protection officer shall have tasks including monitoring compliance with this Regulation and with the policies of the controller or processor.
Supervisory authorities shall have investigative powers, including the ability to obtain from the controller and the processor access to all personal data and to all information necessary for the performance of its tasks.
Supervisory authorities may impose administrative fines for infringements of this Regulation, which shall be effective, proportionate, and dissuasive.