10 questions · 3 minutes · Free

Are you compliant
with Law 25?

Assess your posture in 10 questions. Get a personalized report with your score, your gaps and a concrete action plan to reach compliance.

Start the assessment Learn more about Law 25 →
01 · What's assessed

Ten pillars of Law 25 compliance.

👤

Designated Privacy Officer

Have you appointed an officer and published their contact details?

📋

Incident register

Do you keep a register of confidentiality incidents?

🤝

Vendor agreements

Do your subcontractor contracts include PI-protection clauses?

🔍

PIAs

Do you conduct PIAs before launching new projects?

Explicit consent

Are your banners and forms compliant?

📩

Individual rights

Do you have a procedure for access, rectification, deletion?

🛡️

Technical security

Encryption, MFA, access controls, logging?

🗑️

Retention

Documented retention and destruction policy?

🎓

Employee training

Is your staff aware of Law 25?

🌍

Hosting outside QC

Have you assessed cross-border transfers?

— What's at stake

Fines of up to $25M or 4% of worldwide revenue — not counting civil claims and reputational damage.

02 · Start

A 10-question self-assessment.

Question 1 / 10

Have you officially designated a Privacy Officer (RPRP) and published their contact information?