TLDR: Interactive quiz that assesses your GDPR/CCPA compliance in 5 minutes. Answer questions about your data practices, get a personalized compliance score, and receive specific recommendations—free, no signup required.
Read full summary
A free interactive assessment tool that evaluates website privacy compliance through targeted questions about consent implementation, data processing practices, third-party integrations, and regulatory requirements. Provides personalized scoring and actionable recommendations based on GDPR, CCPA, and other privacy regulations.
Summary by Claude AI
The Compliance Confidence Gap
Many website owners believe their sites are GDPR compliant until a technical check shows trackers firing before consent or a missing reject option.
The gap isn't malicious—it's educational. Most website owners don't know what compliance actually requires. They installed a cookie banner, added a privacy policy, and assumed the job was done.
Compliance isn't a checkbox. It's a practice. And most people don't know where they stand.
Why Take a Privacy Quiz?
Self-Assessment Before External Audit
Regulators, customers, and partners all audit compliance. A quiz lets you identify gaps before someone else finds them.
Team Alignment
Everyone on your team should understand your privacy posture. A quiz creates shared awareness and common language.
Prioritization Framework
You can't fix everything at once. Quiz results show which issues matter most based on your specific situation.
No-Pressure Learning
Unlike a compliance audit, a quiz is private, instant, and free. Learn without exposure.
How the Privacy Quiz Works
Part 1: Your Website Profile
Questions include:
- What type of website do you operate?
- What's your primary audience region?
- How many monthly visitors do you receive?
- What third-party services do you use?
This establishes your regulatory exposure and compliance context.
Part 2: Consent Implementation
Questions include:
- Do you display a cookie consent banner?
- Can users reject non-essential cookies?
- Do cookies load before user consent?
- Have you implemented Google Consent Mode v2?
These questions identify common consent implementation gaps.
Part 3: Data Processing Practices
Questions include:
- Do you have a documented privacy policy?
- Is your cookie policy auto-generated or manually written?
- Do you know all third-party services on your site?
- Can you respond to data deletion requests?
This reveals process maturity and documentation status.
Part 4: Specific Regulations
Questions include:
- Do you need to comply with GDPR? (EU visitors)
- Do you need CCPA compliance? (California residents)
- Are you in a regulated industry? (Healthcare, finance)
- Do you process children's data? (COPPA considerations)
This identifies applicable regulations and special requirements.
Scoring Methodology
Compliance Categories
The quiz evaluates five dimensions:
| Category | Weight | Description |
|---|---|---|
| Consent Mechanics | 30% | Technical implementation of consent |
| Policy Documentation | 20% | Privacy policy completeness |
| User Rights | 20% | Data access/deletion capabilities |
| Third-Party Governance | 15% | Control over external services |
| Regulatory Alignment | 15% | Specific regulation requirements |
Score Interpretation
| Score | Level | Meaning |
|---|---|---|
| 90-100 | Excellent | Strong compliance posture |
| 70-89 | Good | Minor improvements needed |
| 50-69 | Fair | Significant gaps to address |
| 30-49 | Poor | Major compliance risks |
| 0-29 | Critical | Immediate action required |
Personalized Recommendations
Based on your answers, the quiz generates:
- Priority actions: Top 3 things to fix immediately
- Regulatory gaps: Specific regulation requirements you're missing
- Resource links: Relevant guides and documentation
- Tools suggestions: Specific features that address your gaps
Sample Quiz Results
Example: Small E-commerce Site
Profile: Shopify store, EU and US customers, 15,000 monthly visitors
Score: 52/100 (Fair)
Key Findings:
- ✅ Has cookie banner installed
- ❌ Banner doesn't allow granular rejection
- ❌ No documented cookie policy
- ❌ Third-party marketing pixels not inventoried
- ⚠️ No process for DSAR requests
Recommendations:
- Upgrade to preference center allowing category-by-category choice
- Generate cookie declaration listing all tracking technologies
- Implement data subject access request workflow
- Audit and document all third-party integrations
Example: B2B SaaS Platform
Profile: React application, primarily US with growing EU, 50,000 monthly users
Score: 71/100 (Good)
Key Findings:
- ✅ Comprehensive privacy policy
- ✅ Cookie consent with granular controls
- ❌ Consent Mode v2 not implemented
- ⚠️ Third-party analytics pre-consent on some pages
- ✅ DSAR process documented
Recommendations:
- Implement Google Consent Mode v2 for EU traffic
- Audit page-specific consent implementation
- Consider IAB TCF 2.2 for advertising integrations
Question Deep Dive
"Do cookies load before the user interacts with your consent banner?"
Why this matters: This is the single most common GDPR violation. If your answer is "yes" or "I don't know," you have a compliance gap.
How to check: Use browser DevTools Network tab. Refresh the page and look for cookies being set before you click anything.
"Can users reject all non-essential cookies with a single click?"
Why this matters: GDPR requires reject options to be as easy as accept options. A hidden settings menu doesn't count.
Best practice: "Accept All" and "Reject All" buttons should be equally prominent.
"Do you know every third-party service that sets cookies on your site?"
Why this matters: You're responsible for what happens on your site—including third-party behavior. Undocumented tracking is uncontrolled risk.
Action: Run a cookie scan to inventory all tracking technologies.
"Can you delete a user's data within 30 days of request?"
Why this matters: GDPR Article 17 requires data erasure on request. If you can't technically do this, you're non-compliant.
Reality check: Most companies can't. The quiz reveals this gap.
Using Quiz Results
For Leadership
Present quiz findings as:
- Current score vs. target score
- Risk areas with business impact
- Investment needed to close gaps
- Timeline for improvement
For Technical Teams
Use quiz gaps to:
- Prioritize development work
- Identify integration requirements
- Plan implementation sprints
- Measure progress over time
For Legal/Compliance
Leverage results for:
- Risk documentation
- Vendor evaluation criteria
- Training program design
- Policy update priorities
For Agencies
Include quiz in:
- Client onboarding assessments
- Proposal scoping
- Retainer justification
- Progress reporting
Retaking the Quiz
Privacy isn't static. Retake the quiz:
- After major site changes: New features may introduce compliance gaps
- Quarterly: Regular assessment catches drift
- Post-implementation: Verify that fixes actually improved your score
- Regulation updates: New requirements may change your score
Beyond the Quiz
The quiz identifies what needs attention. Addressing it requires:
Quick Wins (Days)
- Install or upgrade consent banner
- Add reject button to banner
- Update privacy policy date
Medium Effort (Weeks)
- Implement consent-based script blocking
- Set up Consent Mode v2
- Create DSAR response process
Significant Projects (Months)
- Third-party service audit and remediation
- Cross-domain consent synchronization
- Comprehensive data mapping
Take the Quiz Now
- Go to getcookies.co/tools/privacy-quiz
- Answer 15-20 questions (5 minutes)
- Get instant score and recommendations
No signup. No email required. Just clarity on where you stand.
Most compliance gaps exist because nobody knew to look. Now you know where to look.