Free Tool — GDPRGard.eu

GDPR Decision
Trees

Six interactive consultant assessment tools. Walk through a client scenario step by step and land on a documented, defensible result — scope, DPAs, DPIAs, data subject rights, breach notification and international transfers.

Share this
Prefer to listen? Click play for AI narration
Why It Matters

GDPR compliance is a series of decisions, not one big project

"Does GDPR even apply to us?" "What's our lawful basis for this?" "Do we need a DPIA before we launch this?" — these feel like they need a lawyer and a week, but most of them actually reduce to a handful of branching yes/no questions once you know what to ask.

These decision trees walk you through exactly that: the same logic a data protection consultant would run through, broken into clear questions with a definite answer at the end — not a wall of regulation to interpret yourself.

1

Pick your question

Scope, lawful basis, DPAs, DPIAs, data subject rights, breach notification, or international transfers.

2

Answer as you go

Simple yes/no branching questions about your specific situation.

3

Land on a clear answer

A direct outcome, with the reasoning behind it, in a few minutes.

Common Questions

Before you start

Which decision trees are available?▼
GDPR scope and applicability, choosing a lawful basis, when you need a Data Processing Agreement, when a DPIA is required, handling data subject rights requests, breach notification, and international data transfers.
Is this a substitute for legal advice?▼
No. It's built to give you a fast, well-reasoned directional answer for common situations — for anything borderline, high-risk, or unusual, confirm with a data protection lawyer or your DPO.
How is this different from the GDPR Audit or Checklist tools?▼
The decision trees answer one specific question quickly. The GDPR Audit and Checklist go broader — assessing your whole compliance posture and producing a prioritised action list rather than a single yes/no answer.
Do I need to go through every tree?▼
No — just pick the one that matches the question you're actually facing right now. Most people use one or two, not all seven.
Is any of my data collected or stored?▼
No — the trees run entirely from your answers to the on-screen questions. No business or personal information is submitted or retained anywhere.
How often are the trees updated?▼
Whenever regulatory guidance or enforcement practice shifts enough to change the logic — not on a fixed schedule.