Skip to content
Talk to us →
Diagnostic Centre89 free tools: diagnostics, builders, planners, visa check · no sign-upFree
About
OverviewAbout RisalatCapabilities and experienceFor agencies, donors and fundsQuality assuranceCapacity BarometerClients and partnersRisalat AcademyPortfolioTestimonialsVideo galleryCareersLife at RisalatBecome an ambassador
Programmes
OverviewProgramme categoriesTraining calendarProgrammes by cityLearning pathsGlobal learning programmesIn-house programmesOnline programmes
Approach in Action
OverviewSee how we workTransformation blueprintsProgramme evaluationNeeds assessment and capacityProject delivery supportProcurement and PFM reformSolution areas
Blueprints
OverviewAll blueprintsDigital Payments TransformationContract Management and Works SupervisionProject Financial Management and DisbursementProject Delivery and Disbursement AccelerationSocial Protection DeliveryClimate Finance ReadinessPublic Financial Management ReformProcurement ReformMonitoring, Evaluation and Learning SystemEnvironmental and Social Risk ManagementDigital Transformation
DiagnosticsFree
OverviewDiagnostic CentreTraining Needs AssessmentProject Health CheckCapacity Development PlannerProcurement Delay AnalyserChange Readiness AssessmentCV DesignerLogframe BuilderVisa checkTeam nomination plannerTemplate libraryAll tools A to Z
Insights
OverviewAI and data in governmentClimate financePublic procurementMonitoring and evaluationProject managementLeadership
Contact
Contact usFAQsRequest an invoiceRequest a proposal
Talk to us →Sign in / create account
When you finish, see where you stand among other professionals and challenge a colleague to beat your score.

Home › Free tools › Digital Project and Data Protection Readiness Assessment

Digital Project and Data Protection Readiness Assessment

Donors are financing digital ID, social registries, payment systems and e-services at scale, and they expect the systems to be lawful, secure and inclusive.⁣​‌​‌​​‌​​‌‌​​​‌‌​‌‌​‌‌‌‌​​‌‌​​​​​​‌​‌‌‌​​​‌‌​​​‌​‌‌‌‌​​​​‌‌​‌‌​​⁣ This assessment checks a digital project against GDPR-style data protection principles that most national laws now follow, the UN Universal DPI Safeguards Framework (September 2024), the World Bank Principles on Identification for Sustainable Development and basic cybersecurity practice. It complements our Data Governance Maturity Assessment, which looks at the whole organisation. This is a real readiness tool: each question is drawn from the current official texts listed under "Based on", and Risalat's guideline monitor re-checks those sources every two weeks so the questions follow new editions.

  • Assessment
  • 12 min
  • Free
  • Sources checked October 2026

Who it is for

  • Teams running digital ID, social registry, e-services or payment projects
  • Ministries of ICT, digital transformation and social protection
  • Data protection officers and legal advisers
  • Vendors and system integrators on donor-funded digital contracts
  • Development partners reviewing digital projects

What you get

  • A readiness score across six areas a lender or regulator will review
  • The legal and safeguard gaps in your system design
  • Practical steps for privacy by design, security and inclusion
  • Links to the official frameworks
  • Programmes that build the missing skills

How this tool works

Built on
Regulation (EU) 2016/679 (General Data Protection Regulation); UN Universal DPI Safeguards Framework; Principles on Identification for Sustainable Development
Scoring
Each answer scores from 0 (not in place) to 4 (fully in place). An area's score is the points earned as a share of the maximum for the questions you answered; the overall score is the average of the areas. Bands: Early stage 0–39%, Developing 40–69%, Ready 70–100%.
Your data
What you type stays in your browser unless you save it to a free account. We receive your name, email and summary only when you open your results.
Sources checked
October 2026 (checked every month)
Team or organisation
With a free account you can invite colleagues from each department to answer the same questions. You get a consolidated dashboard: scores by area and department, where colleagues disagree, priority gaps and an action plan. Anonymous mode hides names and groups departments with fewer than 3 responses.

Need a verified result? Ask for an independent assessment by Risalat.

Programmes that build these skills

Upcoming programmes whose content matches the areas this tool measures. Your results show which fit your weakest areas.

ProgrammeCybersecurity Fundamentals for Business LeadersSingapore · 26 Jan 2027Builds: Security and resilienceProgrammeMasterclass in Cyber Security Management in TallinnTallinn · 1 Feb 2027Builds: Security and resilienceProgrammeTraining Course on Cybersecurity in Digital Health in TallinnTallinn · 8 Feb 2027Builds: Security and resilienceProgrammeData Governance and National Interoperability Frameworks in DubaiDubai · 18 Jan 2027Builds: Data sharing and vendorsProgrammeOcean Data Governance and Commercial Offshore Fisheries Compliance in AucklandAuckland · 11 Jan 2027Builds: Data sharing and vendors

Nothing here for your exact need? Ask for an in-house programme built around your gaps, or browse all programmes.

Questions

Does GDPR apply to my project outside Europe?

Usually not directly, unless you offer services to people in the EU or monitor them. But many national laws follow the same principles, and donors often expect equivalent protection.

What is digital public infrastructure (DPI)?

Shared digital systems such as digital ID, payments and data exchange that governments and others use to deliver services at scale.

How is this different from the Data Governance Maturity Assessment?

That tool looks at the whole organisation's data governance.⁣​‌​‌​​‌​​‌‌​​​‌‌​‌‌​‌‌‌‌​​‌‌​​​​​​‌​‌‌‌​​​‌‌​​​‌​‌‌‌‌​​​​‌‌​‌‌​​⁣ This one focuses on a specific digital system or project and the safeguards a lender or regulator will review.

When should a DPIA be done?

Before the design is final and before any personal data is collected, and again when the system changes significantly.

Based on

Sources checked: October 2026. We check the official sources every month.

This is a self-assessment and training tool, not legal advice or a security audit. Always follow your national data protection and cybersecurity laws and the requirements in your financing agreement.

Go further

Data Governance Maturity AssessmentCybersecurity Basics AssessmentAI Governance and EU AI Act Readiness

More free tools

AI Governance and EU AI Act Readiness AssessmentEnvironmental and Social Standards Readiness Assessment (WB, ADB, EBRD, AfDB, EIB)Donor Procurement Rules Readiness Assessment (WB 2025, EBRD 2026, EU PRAG 2025)Paris Alignment and Climate Readiness AssessmentClimate Finance Proposal Readiness AssessmentAll tools →